CVE-2020-29017

An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the system by exploiting a command injection vulnerability on the Customization page.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@fortinet.com

Published

2021-01-14

Last modified

2024-10-25

Weaknesses

CWE-78

Affected products

• Fortideceptor (Fortinet)

References

• https://www.fortiguard.com/psirt/FG-IR-20-177