CVE-2022-39952

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.

Affected

Fortinet · FortiNAC

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

99.79% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical

Published

2023-02-16

Updated

2024-10-23

Proof-of-concept exploits (4)

• Chocapikk/CVE-2022-399523★ · 2023-02-26
• dkstar11q/CVE-2022-39952-better0★ · 2023-02-26
• horizon3ai/CVE-2022-39952266★ · 2023-02-25
• shiyeshu/CVE-2022-39952_webshell2★ · 2023-02-22

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39952.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/fortinac_keyupload_fi…

Exploit collections (1)

• CVE-2022-39952.yamlzan8in/afrog

Security advisories

• https://fortiguard.com/psirt/FG-IR-22-300

References

• CVE Record
• NVD entry

Related

• CVE-2022-31814
• CVE-2022-40684
• CVE-2022-44877
• CVE-2024-26229
• CVE-2024-27130
• CVE-2024-29269