CVE-2022-39952

critical · 9.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.

9.8

CVSS

99.8%

EPSS (exploit prob.)

100th

EPSS percentile

2023-02-16

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-73CWE-668

Affected products

Vendor	Product	Affected versions
fortinet	fortinac	>= 8.3.7, <= 8.8.9
fortinet	fortinac	>= 9.1.0, < 9.1.8
fortinet	fortinac	>= 9.2.0, < 9.2.6
fortinet	fortinac	>= 9.4.0, < 9.4.1

Check a specific version with /api/v1/cve/match.

References

https://fortiguard.com/psirt/FG-IR-22-300
https://fortiguard.com/psirt/FG-IR-22-300

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-39952