CVE-2022-33875: SQL Injection
An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-33875?
CVE-2022-33875 is an SQL Injection vulnerability in Fortinet FortiADC versions 7.1.0, 7.0.0 through 7.0.2, and 6.2.4 and below that allows an attacker to execute unauthorized code or commands.
How severe is CVE-2022-33875?
CVE-2022-33875 has a severity rating of 8.8 (high).
How does CVE-2022-33875 affect Fortinet FortiADC?
CVE-2022-33875 affects Fortinet FortiADC versions 7.1.0, 7.0.0 through 7.0.2, and 6.2.4 and below.
How can an attacker exploit CVE-2022-33875?
An attacker can exploit CVE-2022-33875 by crafting specifically crafted HTTP requests to execute unauthorized code or commands.
Is there a fix for CVE-2022-33875?
Yes, Fortinet has released a fix for CVE-2022-33875. It is recommended to update to the latest version of Fortinet FortiADC.