CVE-2023-36642

Summary

CVE-2023-36642 is a vulnerability affecting FortiTester versions 3.0.0 to 7.2.3. This issue, classified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command), allows authenticated attackers to execute unauthorized commands. By providing specifically crafted arguments to existing commands, they can manipulate the management interface, potentially leading to significant security implications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.