CVE-2023-40716

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester 2.3.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments when running execute restore/backup .

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Fortinet	FortiTester	>= 7.2.0, <= 7.2.3; >= 7.1.0, <= 7.1.1; 7.0.0; >= 4.2.0, <= 4.2.1; >= 4.1.0, <= 4.1.1; 4.0.0; >= 3.9.0, <= 3.9.2; 3.8.0; >= 3.7.0, <= 3.7.1; 3.6.0; >= 3.5.0, <= 3.5.1; 3.4.0; >= 3.3.0, <= 3.3.1; 3.2.0; 3.1.0; 3.0.0; 2.9.0; 2.8.0; 2.7.0; 2.6.0

References

https://fortiguard.com/psirt/FG-IR-22-345Vendor Advisory
https://fortiguard.com/psirt/FG-IR-22-345Vendor Advisory

Timeline

Published: Dec 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-407177.8A use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell CVE-2023-407187.5A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packe CVE-2023-407195.5A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an at CVE-2023-40728.8Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corrupt CVE-2023-407207.1An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6 CVE-2023-407216.7A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbi CVE-2023-407238.1An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and CVE-2023-407247.3A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacke CVE-2023-407254.0A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages CVE-2023-407268.8A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive infor CVE-2023-407277.8A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak o CVE-2023-407287.8A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sens