All intelligence
// vulnerability record
live · NVDCVE-2024-46662
HIGHpublished 2025-03-14 15:15 UTC · 1 year ago · modified 2026-06-17 07:55 UTC
8.8
CVSS / 10
// description
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets
// cvss 3.1 vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
// weaknesses (CWE)
- CWE-77