VULNERABILITY INTELLIGENCE

CVE-2022-41328

CVSS score6.7 MEDIUM
EPSS probability10.68%
CISA KEVKnown exploited vulnerability
Published2023-03-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Fortinet FortiOS Path Traversal Vulnerability

Vendor / product: Fortinet / FortiOS

Description

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references