CVE-2023-42788

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.8, version 6.4.0 through 6.4.12 and version 6.2.0 through 6.2.11 may allow a local attacker with low privileges to execute unauthorized code via specifically crafted arguments to a CLI command

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Fortinet	FortiAnalyzer	7.4.0; >= 7.2.0, <= 7.2.3; >= 7.0.0, <= 7.0.8; >= 6.4.0, <= 6.4.12; >= 6.2.0, <= 6.2.11
Fortinet	FortiManager	7.4.0; >= 7.2.0, <= 7.2.3; >= 7.0.0, <= 7.0.8; >= 6.4.0, <= 6.4.12; >= 6.2.0, <= 6.2.11

References

https://fortiguard.com/psirt/FG-IR-23-167Vendor Advisory
https://github.com/orangecertcc/security-research/security/advisories/GHSA-qpv8-g6qv-rf8pExploit, Third Party Advisory
https://fortiguard.com/psirt/FG-IR-23-167Vendor Advisory
https://github.com/orangecertcc/security-research/security/advisories/GHSA-qpv8-g6qv-rf8pExploit, Third Party Advisory

Timeline

Published: Oct 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-427899.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, Fort CVE-2023-42797.5This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker CVE-2023-427908.1A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.CVE-2023-427918.8A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 an CVE-2023-427926.5Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some CVE-2023-427939.8In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible CVE-2023-427945.9Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.8 CVE-2023-427955.3Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11 CVE-2023-427968.8A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V0 CVE-2023-427977.2A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V0 CVE-2023-427989.1AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can l CVE-2023-427998.8Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer ove