Fortinet FortiTester vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FF

Product

Fortinet FortiTester

by Fortinet · last CVE Nov 2, 2022

7

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 4High 2Medium 1Low 0

Severity

All severities7 Critical4 High2 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Fortinet FortiTester to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-33873	9.8	3%	Oct 10	An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Console login components of FortiTester 2.3.0 through… Affected: FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-35846	9.8	1%	Oct 10	An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may… Affected: FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-33872	9.8	3%	Oct 10	An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Telnet login components of FortiTester 2.3.0 through… Affected: FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-33874	9.8	3%	Oct 10	An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in SSH login components of FortiTester 2.3.0 through 3.9.1,… Affected: FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-33870	7.8	0%	Nov 2	An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester 3.0.0 through 3.9.1, 4.0.0 through… Affected: FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-35844	7.2	0%	Oct 10	An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0,… Affected: FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-38372	6.7	0%	Nov 2	A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a… Affected: FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0