CVE-2023-47534

A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.

Score

CVSS 3.1 9.6 Critical

Status

Modified - psirt@fortinet.com

Published

2024-03-12

Last modified

2026-10-22

Weaknesses

CWE-1236

Affected products

• Forticlient Endpoint Management Server (Fortinet)
• Forticlientems (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-23-390