CVE-2022-39952

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

99.81% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical

Published

2023-02-16

Updated

2024-10-23

Proof-of-concept exploits (4)

• Chocapikk/CVE-2022-399523★ · 2023-02-26
• dkstar11q/CVE-2022-39952-better0★ · 2023-02-26
• horizon3ai/CVE-2022-39952265★ · 2023-02-25
• shiyeshu/CVE-2022-39952_webshell2★ · 2023-02-22

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39952.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/fortinac_keyupload_fi…

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2022/CVE-2022-39952.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-31814
• CVE-2022-40684
• CVE-2022-44877
• CVE-2024-26229
• CVE-2024-27130
• CVE-2024-50379