CVE-2023-36548

Summary

CVE-2023-36548 is a critical vulnerability affecting Fortinet FortiWLM versions 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4. This issue involves an improper handling of special elements in operating system commands, leading to an os command injection. An attacker can exploit this vulnerability by crafting malicious http get request parameters, allowing them to execute unauthorized code or commands on the targeted system. This poses a significant security risk, underscoring the importance of updating FortiWLM to a patched version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.