Vulnerabilities > CVE-2023-41842 - Unspecified vulnerability in Fortinet products

CVSS 6.7 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

fortinet

NVD

Published: 2024-03-12

Updated: 2024-11-21

Summary

A use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer-BigData before 7.2.5 and Fortinet FortiPortal version 6.0 all versions and version 5.3 all versions allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.

Vulnerable Configurations

Part	Description	Count
Application	Fortinet Fortinet Fortianalyzer 7.2.0 Fortinet Fortianalyzer 7.2.1 Fortinet Fortianalyzer 7.2.2 Fortinet Fortianalyzer 7.2.3 Fortinet Fortianalyzer 7.4.0 Fortinet Fortianalyzer 7.4.1 Fortinet Fortianalyzer 6.2.0 Fortinet Fortianalyzer 6.2.1 Fortinet Fortianalyzer 6.2.2 Fortinet Fortianalyzer 6.2.3 Fortinet Fortianalyzer 6.2.4 Fortinet Fortianalyzer 6.2.5 Fortinet Fortianalyzer 6.2.6 Fortinet Fortianalyzer 6.2.7 Fortinet Fortianalyzer 6.2.8 Fortinet Fortianalyzer 6.2.9 Fortinet Fortianalyzer 6.2.10 Fortinet Fortianalyzer 6.2.11 Fortinet Fortianalyzer 6.2.12 Fortinet Fortianalyzer 6.4.0 Fortinet Fortianalyzer 6.4.1 Fortinet Fortianalyzer 6.4.2 Fortinet Fortianalyzer 6.4.3 Fortinet Fortianalyzer 6.4.4 Fortinet Fortianalyzer 6.4.5 Fortinet Fortianalyzer 6.4.6 Fortinet Fortianalyzer 6.4.7 Fortinet Fortianalyzer 6.4.8 Fortinet Fortianalyzer 6.4.9 Fortinet Fortianalyzer 6.4.10 Fortinet Fortianalyzer 6.4.11 Fortinet Fortianalyzer 6.4.12 Fortinet Fortianalyzer 6.4.13 Fortinet Fortianalyzer 7.0.0 Fortinet Fortianalyzer 7.0.1 Fortinet Fortianalyzer 7.0.2 Fortinet Fortianalyzer 7.0.3 Fortinet Fortianalyzer 7.0.4 Fortinet Fortianalyzer 7.0.5 Fortinet Fortianalyzer 7.0.6 Fortinet Fortianalyzer 7.0.7 Fortinet Fortianalyzer 7.0.8 Fortinet Fortianalyzer 7.0.9 Fortinet Fortimanager 7.2.0 Fortinet Fortimanager 7.2.1 Fortinet Fortimanager 7.2.2 Fortinet Fortimanager 7.2.3 Fortinet Fortimanager 6.2.0 Fortinet Fortimanager 6.2.1 Fortinet Fortimanager 6.2.2 Fortinet Fortimanager 6.2.3 Fortinet Fortimanager 6.2.4 Fortinet Fortimanager 6.2.5 Fortinet Fortimanager 6.2.6 Fortinet Fortimanager 6.2.7 Fortinet Fortimanager 6.2.8 Fortinet Fortimanager 6.2.9 Fortinet Fortimanager 6.2.10 Fortinet Fortimanager 6.2.11 Fortinet Fortimanager 6.2.12 Fortinet Fortimanager 6.4.0 Fortinet Fortimanager 6.4.1 Fortinet Fortimanager 6.4.2 Fortinet Fortimanager 6.4.3 Fortinet Fortimanager 6.4.4 Fortinet Fortimanager 6.4.5 Fortinet Fortimanager 6.4.6 Fortinet Fortimanager 6.4.7 Fortinet Fortimanager 6.4.8 Fortinet Fortimanager 6.4.9 Fortinet Fortimanager 6.4.10 Fortinet Fortimanager 6.4.11 Fortinet Fortimanager 6.4.12 Fortinet Fortimanager 6.4.13 Fortinet Fortimanager 7.0.0 Fortinet Fortimanager 7.0.1 Fortinet Fortimanager 7.0.2 Fortinet Fortimanager 7.0.3 Fortinet Fortimanager 7.0.4 Fortinet Fortimanager 7.0.5 Fortinet Fortimanager 7.0.6 Fortinet Fortimanager 7.0.7 Fortinet Fortimanager 7.0.8 Fortinet Fortimanager 7.0.9 Fortinet Fortimanager 7.4.0 Fortinet Fortimanager 7.4.1 Fortinet Fortianalyzer Bigdata * Fortinet Fortianalyzer Bigdata 6.2.5 Fortinet Fortiportal 5.3.0 Fortinet Fortiportal 5.3.1 Fortinet Fortiportal 5.3.2 Fortinet Fortiportal 5.3.3 Fortinet Fortiportal 5.3.4 Fortinet Fortiportal 5.3.5 Fortinet Fortiportal 5.3.6 Fortinet Fortiportal 5.3.7 Fortinet Fortiportal 5.3.8 Fortinet Fortiportal 6.0.0 Fortinet Fortiportal 6.0.1 Fortinet Fortiportal 6.0.2 Fortinet Fortiportal 6.0.3 Fortinet Fortiportal 6.0.4 Fortinet Fortiportal 6.0.5 Fortinet Fortiportal 6.0.6 Fortinet Fortiportal 6.0.7 Fortinet Fortiportal 6.0.8 Fortinet Fortiportal 6.0.9 Fortinet Fortiportal 6.0.10 Fortinet Fortiportal 6.0.11 Fortinet Fortiportal 6.0.12 Fortinet Fortiportal 6.0.13 Fortinet Fortiportal 6.0.14	113

Summary

Vulnerable Configurations

References