CVE-2022-38372medium

CVE-2022-38372: medium-severity vulnerability in Fortinet FortiTester

Published · Updated

Follow this CVE+ Monitor Fortinet FortiTester

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.7epss 0.2%
A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
Affected products
Fortinet · Fortinet FortiTester
Related CVEs — Fortinet FortiTester

In the same product, most dangerous first.

CVE-2022-33872CRITICALCVE-2022-33872EPSS 3.0%CVE-2022-33874CRITICALCVE-2022-33874EPSS 3.0%CVE-2022-33873MEDIUMCVE-2022-33873EPSS 2.6%CVE-2022-35846HIGHCVE-2022-35846EPSS 0.9%CVE-2020-12815—CVE-2020-12815EPSS 0.9%CVE-2022-33870HIGHCVE-2022-33870EPSS 0.4%