VULNERABILITY INTELLIGENCE

CVE-2023-47534

CVSS score9.6 CRITICAL
EPSS probability1.05%
CISA KEVNot currently listed
Published2024-03-12
Last modified2026-10-22
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.

Weakness classification

  • psirt@fortinet.com: CWE-1236
  • nvd@nist.gov: CWE-1236

Primary references