Which versions of Fortinet FortiADC are affected by CVE-2022-33876?

Fortinet FortiADC versions 7.1.0, 7.0.0 through 7.0.2, and 6.2.4 and below are affected by CVE-2022-33876.

What is the severity of CVE-2022-33876?

CVE-2022-33876 has a severity score of 6.5 (medium).

How can an attacker exploit CVE-2022-33876?

An authenticated attacker can exploit CVE-2022-33876 by sending crafted HTTP requests to retrieve files with specific extensions from the underlying Linux system.

Are there any references available for CVE-2022-33876?

Yes, you can find more information about CVE-2022-33876 at the following reference: https://fortiguard.com/psirt/FG-IR-22-253

Vulnerability/
CVE-2022-33876

medium

6.5

CWE

6/12/2022

3/8/2024

CVE-2022-33876: Input Validation

Q: What is CVE-2022-33876?

CVE-2022-33876 is a vulnerability in Fortinet FortiADC version 7.1.0 and below that allows an authenticated attacker to retrieve files with specific extensions from the underlying Linux system through crafted HTTP requests.

First published: Tue Dec 06 2022(Updated: )

Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests.

Credit: psirt@fortinet.com

Affected Software	Affected Version	How to fix
Fortinet FortiADC	>=5.1.0<=6.2.4
Fortinet FortiADC	=7.0.0
Fortinet FortiADC	=7.0.1
Fortinet FortiADC	=7.0.2
Fortinet FortiADC	=7.1.0

Remedy

Please upgrade to FortiADC version 7.1.1 or above Please upgrade to FortiADC version 7.0.3 or above Please upgrade to FortiADC version 6.2.5 or above

Never miss a vulnerability like this again

Reference Links

https://fortiguard.com/psirt/FG-IR-22-253

Frequently Asked Questions

What is CVE-2022-33876?
CVE-2022-33876 is a vulnerability in Fortinet FortiADC version 7.1.0 and below that allows an authenticated attacker to retrieve files with specific extensions from the underlying Linux system through crafted HTTP requests.
Which versions of Fortinet FortiADC are affected by CVE-2022-33876?
Fortinet FortiADC versions 7.1.0, 7.0.0 through 7.0.2, and 6.2.4 and below are affected by CVE-2022-33876.
What is the severity of CVE-2022-33876?
CVE-2022-33876 has a severity score of 6.5 (medium).
How can an attacker exploit CVE-2022-33876?
An authenticated attacker can exploit CVE-2022-33876 by sending crafted HTTP requests to retrieve files with specific extensions from the underlying Linux system.
Are there any references available for CVE-2022-33876?
Yes, you can find more information about CVE-2022-33876 at the following reference: https://fortiguard.com/psirt/FG-IR-22-253

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/severity
agent/remedy
agent/author
agent/last-modified-date
agent/references
agent/tags
agent/first-publish-date
agent/event
agent/description
vendor/fortinet
canonical/fortinet fortiadc
version/fortinet fortiadc/5.1.0
version/fortinet fortiadc/6.2.4
version/fortinet fortiadc/7.0.0
version/fortinet fortiadc/7.0.1
version/fortinet fortiadc/7.0.2
version/fortinet fortiadc/7.1.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.