CVE-2023-34992: OS Command Injection
First published: Tue Oct 10 2023(Updated: )
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 7.0.0 and 6.7.0 through 6.7.5 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 allows attacker to execute unauthorized code or commands via crafted API requests.
Credit: psirt@fortinet.com psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiSIEM | >=6.6.0<=6.6.3 | |
| Fortinet FortiSIEM | >=6.7.0<=6.7.5 | |
| Fortinet FortiSIEM | =6.4.0 | |
| Fortinet FortiSIEM | =6.4.1 | |
| Fortinet FortiSIEM | =6.4.2 | |
| Fortinet FortiSIEM | =6.5.0 | |
| Fortinet FortiSIEM | =6.5.1 | |
| Fortinet FortiSIEM | =7.0.0 | |
| Fortinet FortiOS | ||
| Fortinet FortiProxy |
Remedy
Please upgrade to FortiSIEM version 7.0.1 or above Please upgrade to FortiSIEM version 6.7.6 or above Please upgrade to FortiSIEM upcoming version 6.6.4 or above Please upgrade to FortiSIEM upcoming version 6.5.2 or above Please upgrade to FortiSIEM upcoming version 6.4.3 or above
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://fortiguard.com/psirt/FG-IR-23-130
- https://www.theregister.com/2024/02/06/fortinet_fortisiem_vulns/
- https://www.bleepingcomputer.com/news/security/fortinet-snafu-critical-fortisiem-cves-are-duplicates-issued-in-error/
- https://www.bleepingcomputer.com/news/security/fortinet-warns-of-new-fortisiem-rce-bugs-in-confusing-disclosure/
- https://www.theregister.com/2024/02/09/a_look_at_fortinet_week/
- https://www.bleepingcomputer.com/news/security/new-fortinet-rce-bug-is-actively-exploited-cisa-confirms/
- https://www.bleepingcomputer.com/news/security/exploit-released-for-maximum-severity-fortinet-rce-bug-patch-now/
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for this Fortinet FortiSIEM vulnerability?
The vulnerability ID for this Fortinet FortiSIEM vulnerability is CVE-2023-34992.
What is the severity level of CVE-2023-34992?
The severity level of CVE-2023-34992 is critical with a CVSS score of 9.8.
Which versions of Fortinet FortiSIEM are affected by CVE-2023-34992?
Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.5, 6.6.0 through 6.6.3, 6.5.0 through 6.5.1, 6.4.0 through 6.4.2 are affected by CVE-2023-34992.
What is the impact of CVE-2023-34992?
CVE-2023-34992 allows an attacker to execute unauthorized code or commands via crafted API requests, leading to potential compromise of the Fortinet FortiSIEM system.
Is there a fix available for CVE-2023-34992?
Yes, Fortinet has provided a security advisory with remediation steps to address the vulnerability. Please refer to the reference link for more information.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/author
- agent/type
- collector/the-register
- source/The Register
- alias/CVE-2024-23108
- alias/CVE-2024-23109
- alias/CVE-2023-34992
- agent/description
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2023-36553
- alias/CVE-2024-23113
- alias/CVE-2024-21762
- alias/CVE-2022-42475
- alias/CVE-2023-27997
- agent/softwarecombine
- agent/news-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- alias/FG-IR-23-130
- agent/references
- agent/remedy
- agent/severity
- agent/first-publish-date
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/fortinet
- canonical/fortinet fortisiem
- version/fortinet fortisiem/6.6.0
- version/fortinet fortisiem/6.6.3
- version/fortinet fortisiem/6.7.0
- version/fortinet fortisiem/6.7.5
- version/fortinet fortisiem/6.4.0
- version/fortinet fortisiem/6.4.1
- version/fortinet fortisiem/6.4.2
- version/fortinet fortisiem/6.5.0
- version/fortinet fortisiem/6.5.1
- version/fortinet fortisiem/7.0.0
- canonical/fortinet fortios
- canonical/fortinet fortiproxy