CVE-2023-48788

Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

References

https://thehackernews.com/2024/04/hackers-exploit-fortinet-flaw-deploy.html?&web_view=true

https://www.hivepro.com/threat-advisory/forticlient-ems-vulnerability-exploited-in-connectfun-campaign/

https://redcanary.com/blog/cve-2023-48788/

https://www.scmagazine.com/news/fortinet-forticlient-ems-sql-injection-flaw-exploited-in-the-wild

https://thecyberthrone.in/2024/03/26/cisa-kev-update-march-2024-part-2/

https://securityaffairs.com/161057/security/cisa-adds-forticlient-ems-ivanti-epm-csa-nice-linear-emerge-e3-series-bugs-to-its-known-exploited-vulnerabilities-catalog.html

https://www.bleepingcomputer.com/news/security/exploit-released-for-fortinet-rce-bug-used-in-attacks-patch-now/?&web_view=true

https://securityaffairs.com/160885/hacking/fortinet-forticlient-ems-critical-flaw.html

https://www.bleepingcomputer.com/news/security/exploit-released-for-fortinet-rce-bug-used-in-attacks-patch-now/

https://securityaffairs.com/160885/uncategorized/fortinet-forticlient-ems-critical-flaw.html

https://www.tenable.com/blog/cve-2023-48788-critical-fortinet-forticlientems-sql-injection-vulnerability

https://www.hivepro.com/threat-advisory/fortinet-releases-patches-for-critical-vulnerabilities-in-various-products/

https://www.tenable.com/blog/cve-2023-48788-critical-fortinet-forticlientems-sql-injection-vulnerability

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-rce-bug-in-endpoint-management-software/?&web_view=true

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-rce-bug-in-endpoint-management-software/

https://securityaffairs.com/160440/security/fortinet-critical-bugs-fortios-fortiproxy-forticlientems.html

https://fortiguard.com/psirt/FG-IR-24-007

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3