Overview
- Description
- A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.
- Source
- psirt@fortinet.com
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFBBFCB8-B202-4B8E-9C6A-9FD080493761",
"versionEndIncluding": "8.8.9",
"versionStartIncluding": "8.3.7"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BF7BE0D-2C93-4CA7-B1AD-B3C019B851D2",
"versionEndExcluding": "9.1.8",
"versionStartIncluding": "9.1.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F62A2710-F28E-4F13-8916-4C743869B2D6",
"versionEndExcluding": "9.2.6",
"versionStartIncluding": "9.2.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21A790F2-B3CD-4C23-9777-BB92982A101C",
"versionEndExcluding": "9.4.1",
"versionStartIncluding": "9.4.0"
}
],
"operator": "OR"
}
]
}
]