CVE-2023-41842

A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@fortinet.com

Published

2024-03-12

Last modified

2026-01-14

Weaknesses

CWE-134

Affected products

• Fortianalyzer (Fortinet)
• Fortianalyzer-bigdata (Fortinet)
• Fortianalyzer Big Data (Fortinet)
• Fortimanager (Fortinet)
• Fortiportal (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-23-304