Vulnerability · NVD

CVE-2023-34993

CVE-2023-34993 : critical severity (CVSS 9.8). No tracked catalog app is linked to this CVE.

Severity (CVSS): 9.8
Exploitation: 21.3 %
Tracked apps: 0
Still exposed: 0

Public exploit : Nuclei Published on 2023-10-10

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.

Attack vector : Network No privileges required No user interaction

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS 21.32% moderate exploit risk percentile 97.6%

View on NVD ↗ Advisory · fortiguard.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM