VULNERABILITY INTELLIGENCE

CVE-2022-43953

CVSS score6.7 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2023-06-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code or commands via specially crafted commands.

Weakness classification

  • psirt@fortinet.com: CWE-134
  • nvd@nist.gov: CWE-134

Primary references