CVE-2022-41328
unknown
KEV
CVSS v3
—
CVSS v2
—
VIR risk
1.5
Description
Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.
CISA KEV
- Vendor
- Fortinet
- Product
- FortiOS
- Due date
- 2023-04-04
Predictions
Exploit likelihood
99%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cisa-kev — https://www.fortiguard.com/psirt/FG-IR-22-369; https://nvd.nist.gov/vuln/detail/CVE-2022-41328
Exploits
References
Verify integrity in audit chain (admin only). AS-IS.