by Kastro
Paper/Archive/CVE-2022-39952

CVE-2022-39952

Fortinet FortiNAC — A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.…

EPSS 100%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 100.01.000 × 2020.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.

Affected

ProductAffectedFixed inSource
FortiNAC9.4.0–CNA
FortiNAC9.2.0 – 9.2.5–CNA
FortiNAC9.1.0 – 9.1.7–CNA
FortiNAC8.8.0 – 8.8.11–CNA
FortiNAC8.7.0 – 8.7.6–CNA
FortiNAC8.6.0 – 8.6.5–CNA
FortiNAC8.5.0 – 8.5.4–CNA
FortiNAC8.3.7–CNA

Scores by source

fortinet (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reffortiguard.com/psirt/FG-IR-22-300