CVE-2021-22125

MEDIUM

6.3

Description

An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated administrator to execute commands on the underlying system's shell via altering the content of its configuration file.

CVE Details

CVSS v3.1 Score6.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack VectorADJACENT_NETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published7/20/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

fortinet:fortisandbox

Weaknesses (CWE)

CWE-78

References

https://fortiguard.com/advisory/FG-IR-21-005(psirt@fortinet.com)

https://fortiguard.com/advisory/FG-IR-21-005(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.