Fortinet FortiSIEM Vulnerability Allows Attackers to Execute Unauthorized Code or Commands via API Requests

Summary

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 7.1.0 through 7.1.1 and 7.0.0 through 7.0.2 and 6.7.0 through 6.7.8 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.2 and 6.4.0 through 6.4.2 allows attacker to execute unauthorized code or commands via via crafted API requests.

News Articles

Red Hot Cyber

CVE-2024-23108CVE-2024-23109

Le vulnerabilità critiche nei dispositivi FortiSIEM, macOS e Glibc

Le vulnerabilità scoperte possono avere conseguenze devastanti per la privacy e l'integrità dei dati, oltre che per la continuità operativa.

7 months ago

SC Media

CVE-2024-23108CVE-2024-23109

New Fortinet RCE vulnerability potentially under exploitation

The FortiOS bug was patched a day after Volt Typhoon exploitation of past bugs was revealed.

10 months ago

Beeping Computers

CVE-2024-23108CVE-2024-23109

Fortinet snafu: Critical FortiSIEM CVEs are duplicates, issued in error

It turns out that critical Fortinet FortiSIEM vulnerabilities tracked as CVE-2024-23108 and CVE-2024-23109 are not new and have been published this year in error.

10 months ago

More News...

Refferences