Severity
High
Analysis Summary
CVE-2023-27999
Fortinet FortiADC could allow a local authenticated attacker to execute arbitrary commands on the system, caused by a command injection flaw in the external resource module. By sending specially crafted arguments, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Command Execution
Indicators Of Compromise
CVE
- CVE-2023-27999
Affected Vendors
Fortinet
Affected Products
- Fortinet FortiADC 7.1.0
- Fortinet FortiADC 7.1.1
- Fortinet FortiADC 7.2.0
Remediation
Refer to FortiGuard Advisory for patch, upgrade or suggested workaround information.