CVE-2023-34993
CRITICAL 9.8EPSS 21.3%
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
- Affected
- Fortinet · FortiWLM
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 21.32% chance of exploitation in the next 30 days, 98th percentile
- Nuclei
- critical · CWE-78
- Published
- 2023-10-10
- Updated
- 2024-09-19