A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5, 7.0.0 through 7.0.11, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6 FortiPAM versions 1.1.0, 1.0.0 through 1.0.3 FortiOS versions 7.4.0, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15 FortiSwitchManager versions 7.2.0 through 7.2.2, 7.0.0 through 7.0.2 allows attacker to execute unauthorized code or commands via specially crafted cli commands and http requests.
References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2024-05-14T16:19:18.797Z

Updated: 2024-08-02T20:21:16.756Z

Reserved: 2023-10-09T08:01:29.296Z

Link: CVE-2023-45583

cve-icon Vulnrichment

Updated: 2024-08-02T20:21:16.756Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-14T17:15:22.750

Modified: 2024-05-23T16:23:08.470

Link: CVE-2023-45583

cve-icon Redhat

No data.