CVE-2023-48788

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Mar 12, 2024
Updated: May 23, 2024
CWE ID 89

Summary

CVE-2023-48788 is a vulnerability affecting Fortinet FortiClientEMS versions 7.2.0 through 7.2.2 and 7.0.1 through 7.0.10. An attacker can exploit this SQL injection flaw by sending specially crafted packets to gain unauthorized code execution or execute commands within the impacted FortiClientEMS systems. This vulnerability poses a serious risk, as it allows an attacker to potentially gain full control over the affected systems. Fortinet strongly advises users to update their FortiClientEMS software to address this issue promptly.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share