Detections
Analytics
CVE-2024-23109
critical
Description
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 7.1.0 through 7.1.1 and 7.0.0 through 7.0.2 and 6.7.0 through 6.7.8 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.2 and 6.4.0 through 6.4.2 allows attacker to execute unauthorized code or commands via via crafted API requests.
References
https://www.theregister.com/2024/02/06/fortinet_fortisiem_vulns/?&web_view=true
https://www.theregister.com/2024/02/06/fortinet_fortisiem_vulns/