CVE-2022-22299
First published: Fri Aug 05 2022(Updated: )
A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 through 1.2.13, FortiProxy version 2.0.0 through 2.0.7, FortiProxy version 7.0.0 through 7.0.1, FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through 6.2.10, FortiOS version 6.4.0 through 6.4.8, FortiOS version 7.0.0 through 7.0.2, FortiMail version 6.4.0 through 6.4.5, FortiMail version 7.0.0 through 7.0.2 may allow an authenticated user to execute unauthorized code or commands via specially crafted command arguments.
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiADC | >=6.0.0<=6.0.4 | |
| Fortinet FortiADC | >=6.1.0<=6.1.6 | |
| Fortinet FortiADC | =6.2.0 | |
| Fortinet FortiADC | =6.2.1 | |
| Fortinet FortiMail | >=6.4.0<=6.4.5 | |
| Fortinet FortiMail | >=7.0.0<=7.0.2 | |
| Fortinet FortiProxy | >=1.0.0<=1.0.7 | |
| Fortinet FortiProxy | >=1.1.0<=1.1.6 | |
| Fortinet FortiProxy | >=1.2.0<=1.2.13 | |
| Fortinet FortiProxy | >=2.0.0<=2.0.7 | |
| Fortinet FortiProxy | =7.0.0 | |
| Fortinet FortiProxy | =7.0.1 | |
| Fortinet FortiOS | >=5.0.0<=5.0.14 | |
| Fortinet FortiOS | >=5.2.0<=5.2.15 | |
| Fortinet FortiOS | >=5.4.0<=5.4.13 | |
| Fortinet FortiOS | >=5.6.0<=5.6.14 | |
| Fortinet FortiOS | >=6.0.0<=6.0.14 | |
| Fortinet FortiOS | >=6.2.0<=6.2.10 | |
| Fortinet FortiOS | >=6.4.0<6.4.8 | |
| Fortinet FortiOS | >=7.0.0<7.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- agent/remedy
- agent/author
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/fortinet
- canonical/fortinet fortiadc
- version/fortinet fortiadc/6.0.0
- version/fortinet fortiadc/6.0.4
- version/fortinet fortiadc/6.1.0
- version/fortinet fortiadc/6.1.6
- version/fortinet fortiadc/6.2.0
- version/fortinet fortiadc/6.2.1
- canonical/fortinet fortimail
- version/fortinet fortimail/6.4.0
- version/fortinet fortimail/6.4.5
- version/fortinet fortimail/7.0.0
- version/fortinet fortimail/7.0.2
- canonical/fortinet fortiproxy
- version/fortinet fortiproxy/1.0.0
- version/fortinet fortiproxy/1.0.7
- version/fortinet fortiproxy/1.1.0
- version/fortinet fortiproxy/1.1.6
- version/fortinet fortiproxy/1.2.0
- version/fortinet fortiproxy/1.2.13
- version/fortinet fortiproxy/2.0.0
- version/fortinet fortiproxy/2.0.7
- version/fortinet fortiproxy/7.0.0
- version/fortinet fortiproxy/7.0.1
- canonical/fortinet fortios
- version/fortinet fortios/5.0.0
- version/fortinet fortios/5.0.14
- version/fortinet fortios/5.2.0
- version/fortinet fortios/5.2.15
- version/fortinet fortios/5.4.0
- version/fortinet fortios/5.4.13
- version/fortinet fortios/5.6.0
- version/fortinet fortios/5.6.14
- version/fortinet fortios/6.0.0
- version/fortinet fortios/6.0.14
- version/fortinet fortios/6.2.0
- version/fortinet fortios/6.2.10
- version/fortinet fortios/6.4.0
- version/fortinet fortios/7.0.0