by Kastro
Paper/Archive/CVE-2023-48788

CVE-2023-48788

Fortinet FortiClientEMS — Fortinet FortiClient EMS SQL Injection Vulnerability

KEV · due 15 Aprransomware useEPSS 98%public exploitSSVC actCVSS 9.3
critical.is priorityof 100
98
CVSS 9.3 (CNA)9.3 / 10 × 3027.9In CISA KEV+3030.0EPSS percentile 99.9.999 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

Affected

ProductAffectedFixed inSource
FortiClientEMS7.2.0 – 7.2.2–CNA
FortiClientEMS7.0.1 – 7.0.10–CNA
forticlient_enterprise_management_server7.2.0 – 7.2.2–CISA-ADP
forticlient_enterprise_management_server7.0.1 – 7.0.10–CISA-ADP
forticlient_enterprise_management_server7.2.0 – 7.2.2–CISA-ADP
forticlient_enterprise_management_server7.0.1 – 7.0.10–CISA-ADP

Scores by source

fortinet (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reffortiguard.com/psirt/FG-IR-24-007refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-48788kevcisa.gov/known-exploited-vulnerabilities-catalog