Skip to main content
Threat Radar animated logo
DashboardThreatsMapFeedsAPILifetime Access
reconnecting
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

CVE-2023-34992: Execute unauthorized code or commands in Fortinet FortiSIEM

0
Critical
VulnerabilityCVE-2023-34992cvecve-2023-34992
Published: Tue Oct 10 2023 (10/10/2023, 16:50:21 UTC)
Source: CVE Database V5
Vendor/Project: Fortinet
Product: FortiSIEM

Description

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 7.0.0 and 6.7.0 through 6.7.5 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 allows attacker to execute unauthorized code or commands via crafted API requests.

Technical Details

Data Version
5.2
Assigner Short Name
fortinet
Date Reserved
2023-06-09T06:59:37.971Z
Cvss Version
3.1
State
PUBLISHED

Threat ID: 694194799050fe8508060d06

Added to database: 12/16/2025, 5:18:49 PM

Last updated: 12/16/2025, 5:22:43 PM

Views: 1

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Related Threats

CVE-2023-5997: Use after free in Google Chrome

Unknown
VulnerabilityTue Dec 16 2025

CVE-2023-4804: CWE-489: Active Debug Code in Johnson Controls Quantum HD Unity Compressor

Critical
VulnerabilityTue Dec 16 2025

CVE-2023-4699: CWE-306 Missing Authentication for Critical Function in Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MT/ES

Critical
VulnerabilityTue Dec 16 2025

CVE-2023-4474: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Zyxel NAS326 firmware

Critical
VulnerabilityTue Dec 16 2025

CVE-2023-4473: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Zyxel NAS326 firmware

Critical
VulnerabilityTue Dec 16 2025

Actions

Please log in to the Console to use AI analysis features.

Need enhanced features?

Contact root@offseq.com for Pro access with improved analysis and higher rate limits.

Latest Threats