CVE-2022-40679

Published Apr 11, 2023 CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, 6.1 all versions, 6.2.0 through 6.2.4, 7.0.0 through 7.0.3, 7.1.0; FortiDDoS 4.x all versions, 5.0 all versions, 5.1 all versions, 5.2 all versions, 5.3 all versions, 5.4 all versions, 5.5 all versions, 5.6 all versions and FortiDDoS-F 6.4.0, 6.3.0 through 6.3.3, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Fortinet

FortiDDoS

unaffected

Version	Status	Constraints
`5.6.0`	affected	≤ 5.6.1
`5.5.0`	affected	≤ 5.5.1
`5.4.0`	affected	≤ 5.4.2
`5.3.0`	affected	≤ 5.3.1
`5.2.0`	affected	—
`5.1.0`	affected	—
`5.0.0`	affected	—
`4.7.0`	affected	—
`4.6.0`	affected	—
`4.5.0`	affected	—
`4.4.0`	affected	≤ 4.4.2
`4.3.0`	affected	≤ 4.3.2
`4.2.1`	affected	≤ 4.2.2
`4.1.1`	affected	≤ 4.1.12
`4.0.0`	affected	≤ 4.0.1

Fortinet

FortiDDoS-F

unaffected

Version	Status	Constraints
`6.4.0`	affected	—
`6.3.0`	affected	≤ 6.3.3
`6.2.0`	affected	≤ 6.2.2
`6.1.0`	affected	≤ 6.1.4

Fortinet

FortiADC

unaffected

Version	Status	Constraints
`7.1.0`	affected	—
`7.0.0`	affected	≤ 7.0.3
`6.2.0`	affected	≤ 6.2.4
`6.1.0`	affected	≤ 6.1.6
`6.0.0`	affected	≤ 6.0.4
`5.4.0`	affected	≤ 5.4.5
`5.3.0`	affected	≤ 5.3.7
`5.2.0`	affected	≤ 5.2.8
`5.1.0`	affected	≤ 5.1.7
`5.0.0`	affected	≤ 5.0.4

Configuration 1 [-]

OR	cpe:2.3:a:fortinet:fortiadc::::::::
	cpe:2.3:a:fortinet:fortiddos::::::::
	cpe:2.3:a:fortinet:fortiddos-f::::::::
	cpe:2.3:a:fortinet:fortiddos-f::::::::
	cpe:2.3:a:fortinet:fortiddos-f::::::::
	cpe:2.3:a:fortinet:fortiddos-f:6.4.0:::::::*

No data.

No data available yet.

Remediation

Vendor Solution

Please upgrade to FortiDDoS-F version 6.4.1 or above Please upgrade to FortiDDoS-F version 6.3.4 or above Please upgrade to FortiDDoS-F version 6.2.3 or above Please upgrade to FortiDDoS-F version 6.1.5 or above Please upgrade to FortiDDoS version 5.7.0 or above Please upgrade to FortiADC version 7.1.1 or above Please upgrade to FortiADC version 7.0.4 or above Please upgrade to FortiADC version 6.2.5 or above

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2022-43950	An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, 6.1 all versions, 6.2.0 through 6.2.4, 7.0.0 through 7.0.3, 7.1.0; FortiDDoS 4.x all versions, 5.0 all versions, 5.1 all versions, 5.2 all versions, 5.3 all versions, 5.4 all versions, 5.5 all versions, 5.6 all versions and FortiDDoS-F 6.4.0, 6.3.0 through 6.3.3, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.