Vulnerability Details CVE-2023-25611
A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code or commands via inserting spreadsheet formulas in macro names.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.4%
CVSS Severity
CVSS v3 Score 4.0
Products affected by CVE-2023-25611
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.0
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.1
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.10
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.11
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.12
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.13
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.14
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.15
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.2
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.3
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.4
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.5
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.6
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.7
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.8
-
cpe:2.3:a:fortinet:fortianalyzer:6.4.9
-
cpe:2.3:a:fortinet:fortianalyzer:7.0.0
-
cpe:2.3:a:fortinet:fortianalyzer:7.0.1
-
cpe:2.3:a:fortinet:fortianalyzer:7.0.2
-
cpe:2.3:a:fortinet:fortianalyzer:7.0.3
-
cpe:2.3:a:fortinet:fortianalyzer:7.0.4
-
cpe:2.3:a:fortinet:fortianalyzer:7.0.5
-
cpe:2.3:a:fortinet:fortianalyzer:7.2.0
-
cpe:2.3:a:fortinet:fortianalyzer:7.2.1