← CVE Radar
CVE-2022-41328Fortinet FortiOS Path Traversal Vulnerability
A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.
7.1 HIGHEPSS 10.68%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.1 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| 6.7 | MEDIUM | 3.1fortinet (CNA) | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 6.5 | MEDIUM | 3.1fortinet (CNA) | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RC:C |
CISA required action
⚡ Known exploited · remediation due Apr 4, 2023
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2022-41328
- Status
- Analyzed
- Assigner (CNA)
- fortinet
- Published
- Mar 7, 2023
- Last modified
- 2026-06-17 05:03 UTC
- Weaknesses
- CWE-22 · Execute unauthorized code or commands
Affected Products
As published by the CNA in the CVE record.
FortinetFortiOS5 version ranges
- 7.2.0 through 7.2.3
- 7.0.0 through 7.0.9
- 6.4.0 through 6.4.11
- 6.2.0 through 6.2.13
- 6.0.0 through 6.0.16