EXPOSURES › CVE-2022-41328

CVE-2022-41328

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2023-03-14 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-41328 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildrce

FortiOS RCE flaw exploited in wild

Fortinet's FortiOS suffered a critical path traversal vulnerability allowing local users to read and write files via crafted CLI commands, with evidence of active exploitation in the wild.

Shame score — Active exploitation of a critical vulnerability in a widely used DIB product.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Fortinet · vendor fortios · product

DESCRIPTION

Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.