Executive Risk Summary
"A command injection vulnerability in Fortinet FortiManager versions 7.4.1 through 7.4.3 allows an attacker to escalate privileges via specifically crafted packets, potentially leading to unauthorized access and control. This vulnerability can be exploited by sending malicious packets to the affected system, highlighting the need for immediate patching or mitigation."
Operational Audit Arsenal
Manual Verification Required
This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.
Patch Impact Forecast
Moderate
Internal Work Notes
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Scope of Impact
Original NVD Description
"A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets"