We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI access to execute unauthorized code via specifically crafted CLI commands.
Reserved 2024-12-09 | Published 2025-03-11 | Updated 2025-03-11 | Assigner fortinetExecute unauthorized code or commands
fortiguard.fortinet.com/psirt/FG-IR-24-178
Support options