CVE-2023-36549

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Oct 10, 2023
Updated: Nov 7, 2023
CWE ID 78

Summary

CVE-2023-34986 is a critical vulnerability affecting Fortinet FortiWLM versions 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4. This issue allows an attacker to perform os command injection by improperly neutralizing special elements in HTTP get request parameters. By exploiting this vulnerability, an attacker can execute unauthorized code or commands on the targeted system. This poses a significant risk to network security and necessitates immediate patching.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Fortinet Fortiwlm

Affected Vendors

  • Fortinet