Command Injection Vulnerability in Fortinet FortiNAC

CVE-2023-33300

What is CVE-2023-33300?

An improper neutralization of special elements in a command within Fortinet FortiNAC versions 7.2.1 and earlier, as well as 9.4.3 and earlier, can be exploited through crafted requests. This vulnerability allows attackers to gain limited unauthorized access to files via inter-server communication ports, potentially compromising the integrity and confidentiality of the system.

References