CVE-2023-47541: FortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution

Published Apr 9, 2024

Updated

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiSandbox may allow a privileged attacker with super-admin profile and CLI access to execute arbitrary code via CLI.

Other sources

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions, FortiSandbox 2.3 all versions, FortiSandbox 2.2 all versions, FortiSandbox 2.1 all versions, FortiSandbox 2.0 all versions allows attacker to execute unauthorized code or commands via CLI.

— MITRE

Affected Software

14 affected componentsFixes available

Fortinet FortiSandbox>=2.0.0<4.2.7

Fortinet FortiSandbox>=4.4.0<4.4.3

Fortinet FortiSandbox>=4.4.0<=4.4.2

Fortinet FortiSandbox>=4.2.0<=4.2.6

Fortinet FortiSandbox>=4.0

Fortinet FortiSandbox>=3.2

Fortinet FortiSandbox>=3.1

Fortinet FortiSandbox>=3.0

Fortinet FortiSandbox>=2.5

Fortinet FortiSandbox>=2.4

Fortinet FortiSandbox>=2.3

Fortinet FortiSandbox>=2.2

Fortinet FortiSandbox>=2.1

Fortinet FortiSandbox>=2.0

Remediation

Information

Upgrade to FortiSandbox version 4.4.3 or above Upgrade to FortiSandbox version 4.2.7 or above Fortinet remediated this issue in FortiSandbox Cloud version 24.1 and hence customers do not need to perform any action.

Event History

Apr 9, 2024

Advisory Published

via FortiGuard·12:00 AM

CVE Published

via MITRE·02:24 PM

Data Sourced

via MITRE·02:24 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-47541?

CVE-2023-47541 has been classified as a critical vulnerability due to its potential for remote exploitation.

How do I fix CVE-2023-47541?

To resolve CVE-2023-47541, upgrade Fortinet FortiSandbox to version 4.4.3 or later, or 4.2.7 or later.

Which versions of Fortinet FortiSandbox are affected by CVE-2023-47541?

CVE-2023-47541 affects Fortinet FortiSandbox versions 4.4.0 through 4.4.2, 4.2.0 through 4.2.6, and multiple earlier versions.

What is the vulnerability type identified in CVE-2023-47541?

CVE-2023-47541 is categorized as a path traversal vulnerability.

Can exploit of CVE-2023-47541 lead to data exposure?

Yes, successful exploitation of CVE-2023-47541 may lead to unauthorized access to sensitive files.