Description
A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI `execute backup-local rename` and `execute backup-local show` operations.
Published: 2023-02-16
Score: 6.3 Medium
EPSS: 1.1% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Please upgrade to FortiWeb version 7.0.2 or above Please upgrade to FortiWeb version 6.3.20 or above

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-36910 A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI `execute backup-local rename` and `execute backup-local show` operations.
References
Link Providers
https://fortiguard.com/psirt/FG-IR-22-164 cve-icon cve-icon
History

Wed, 23 Oct 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Fortinet Fortiweb
cve-icon MITRE

Status: PUBLISHED

Assigner: fortinet

Published:

Updated: 2024-10-23T14:47:25.480Z

Reserved: 2022-06-16T11:14:43.763Z

Link: CVE-2022-33871

cve-icon Vulnrichment

Updated: 2024-08-03T08:09:22.682Z

cve-icon NVD

Status : Modified

Published: 2023-02-16T19:15:12.730

Modified: 2024-11-21T07:08:29.840

Link: CVE-2022-33871

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses