Vulnerability · Published Mar 12, 2024 · Assigned by fortinet
CVE-2023-47534
High 8.7
In plain English
A high-severity security flaw in FortiClientEMS from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 64% of all known vulnerabilities).
Official description
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiClientEMS | 7.2.0 – through 7.2.27.0.0 – through 7.0.106.4.7 – through 6.4.96.4.0 – through 6.4.46.2.6 – through 6.2.96.2.3 – through 6.2.406.02.00 – through 06.02.026.0.8 |
Weakness: CWE-1236 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:U/RC:R