CVE-2023-40717: High severity fortinet fortitester vulnerability
Published Sep 13, 2023
·Updated
A use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell on the device to access the database via shell commands.
Affected Software
1 affected component
Fortinet FortiTester>=2.3.0<=7.2.3
Remediation
Information
Please upgrade to FortiTester version 7.3.0 or above
Event History
Sep 13, 2023
CVE Published
via MITRE·12:29 PM
Data Sourced
via MITRE·12:29 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-40717.
2
What is the severity of CVE-2023-40717?
The severity of CVE-2023-40717 is high, with a severity value of 7.8.
3
What is the affected software for CVE-2023-40717?
The affected software for CVE-2023-40717 is FortiTester versions 2.3.0 through 7.2.3.
4
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-798.
5
How can an attacker exploit CVE-2023-40717?
An attacker can exploit CVE-2023-40717 by gaining shell access to the device and accessing the database using shell commands.