CVE-2022-27482

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.6, 6.0.x, 5.x.x allows attacker to execute arbitrary shell code as `root` via CLI commands.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@fortinet.com

Published

2023-02-16

Last modified

2024-10-23

Weaknesses

CWE-78

Affected products

• Fortiadc (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-046