CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-37937

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via the FortiSwitch CLI.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 19.3%

CVSS Severity

CVSS v3 Score 7.8

References

https://fortiguard.com/psirt/FG-IR-23-258

Products affected by CVE-2023-37937

Fortinet » Fortiswitch » Version: 6.0.0

cpe:2.3:o:fortinet:fortiswitch:6.0.0
Fortinet » Fortiswitch » Version: 6.0.1

cpe:2.3:o:fortinet:fortiswitch:6.0.1
Fortinet » Fortiswitch » Version: 6.0.2

cpe:2.3:o:fortinet:fortiswitch:6.0.2
Fortinet » Fortiswitch » Version: 6.0.3

cpe:2.3:o:fortinet:fortiswitch:6.0.3
Fortinet » Fortiswitch » Version: 6.0.4

cpe:2.3:o:fortinet:fortiswitch:6.0.4
Fortinet » Fortiswitch » Version: 6.0.5

cpe:2.3:o:fortinet:fortiswitch:6.0.5
Fortinet » Fortiswitch » Version: 6.0.6

cpe:2.3:o:fortinet:fortiswitch:6.0.6
Fortinet » Fortiswitch » Version: 6.0.7

cpe:2.3:o:fortinet:fortiswitch:6.0.7
Fortinet » Fortiswitch » Version: 6.2.0

cpe:2.3:o:fortinet:fortiswitch:6.2.0
Fortinet » Fortiswitch » Version: 6.2.1

cpe:2.3:o:fortinet:fortiswitch:6.2.1
Fortinet » Fortiswitch » Version: 6.2.2

cpe:2.3:o:fortinet:fortiswitch:6.2.2
Fortinet » Fortiswitch » Version: 6.2.3

cpe:2.3:o:fortinet:fortiswitch:6.2.3
Fortinet » Fortiswitch » Version: 6.2.4

cpe:2.3:o:fortinet:fortiswitch:6.2.4
Fortinet » Fortiswitch » Version: 6.2.5

cpe:2.3:o:fortinet:fortiswitch:6.2.5
Fortinet » Fortiswitch » Version: 6.2.6

cpe:2.3:o:fortinet:fortiswitch:6.2.6
Fortinet » Fortiswitch » Version: 6.2.7

cpe:2.3:o:fortinet:fortiswitch:6.2.7
Fortinet » Fortiswitch » Version: 6.4.0

cpe:2.3:o:fortinet:fortiswitch:6.4.0
Fortinet » Fortiswitch » Version: 6.4.1

cpe:2.3:o:fortinet:fortiswitch:6.4.1
Fortinet » Fortiswitch » Version: 6.4.10

cpe:2.3:o:fortinet:fortiswitch:6.4.10
Fortinet » Fortiswitch » Version: 6.4.11

cpe:2.3:o:fortinet:fortiswitch:6.4.11
Fortinet » Fortiswitch » Version: 6.4.12

cpe:2.3:o:fortinet:fortiswitch:6.4.12
Fortinet » Fortiswitch » Version: 6.4.13

cpe:2.3:o:fortinet:fortiswitch:6.4.13
Fortinet » Fortiswitch » Version: 6.4.2

cpe:2.3:o:fortinet:fortiswitch:6.4.2
Fortinet » Fortiswitch » Version: 6.4.3

cpe:2.3:o:fortinet:fortiswitch:6.4.3
Fortinet » Fortiswitch » Version: 6.4.4

cpe:2.3:o:fortinet:fortiswitch:6.4.4
Fortinet » Fortiswitch » Version: 6.4.5

cpe:2.3:o:fortinet:fortiswitch:6.4.5
Fortinet » Fortiswitch » Version: 6.4.6

cpe:2.3:o:fortinet:fortiswitch:6.4.6
Fortinet » Fortiswitch » Version: 6.4.7

cpe:2.3:o:fortinet:fortiswitch:6.4.7
Fortinet » Fortiswitch » Version: 6.4.8

cpe:2.3:o:fortinet:fortiswitch:6.4.8
Fortinet » Fortiswitch » Version: 6.4.9

cpe:2.3:o:fortinet:fortiswitch:6.4.9
Fortinet » Fortiswitch » Version: 7.0.0

cpe:2.3:o:fortinet:fortiswitch:7.0.0
Fortinet » Fortiswitch » Version: 7.0.1

cpe:2.3:o:fortinet:fortiswitch:7.0.1
Fortinet » Fortiswitch » Version: 7.0.2

cpe:2.3:o:fortinet:fortiswitch:7.0.2
Fortinet » Fortiswitch » Version: 7.0.3

cpe:2.3:o:fortinet:fortiswitch:7.0.3
Fortinet » Fortiswitch » Version: 7.0.4

cpe:2.3:o:fortinet:fortiswitch:7.0.4
Fortinet » Fortiswitch » Version: 7.0.5

cpe:2.3:o:fortinet:fortiswitch:7.0.5
Fortinet » Fortiswitch » Version: 7.0.6

cpe:2.3:o:fortinet:fortiswitch:7.0.6
Fortinet » Fortiswitch » Version: 7.0.7

cpe:2.3:o:fortinet:fortiswitch:7.0.7
Fortinet » Fortiswitch » Version: 7.2.0

cpe:2.3:o:fortinet:fortiswitch:7.2.0
Fortinet » Fortiswitch » Version: 7.2.1

cpe:2.3:o:fortinet:fortiswitch:7.2.1
Fortinet » Fortiswitch » Version: 7.2.2

cpe:2.3:o:fortinet:fortiswitch:7.2.2
Fortinet » Fortiswitch » Version: 7.2.3

cpe:2.3:o:fortinet:fortiswitch:7.2.3
Fortinet » Fortiswitch » Version: 7.2.4

cpe:2.3:o:fortinet:fortiswitch:7.2.4
Fortinet » Fortiswitch » Version: 7.2.5

cpe:2.3:o:fortinet:fortiswitch:7.2.5
Fortinet » Fortiswitch » Version: 7.4.0

cpe:2.3:o:fortinet:fortiswitch:7.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-37937

Products

Pricing

Contact Us