CVEvulnerability

CVE-2023-48788

9.8 CRITICAL Known exploited Published 2024-03-12 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Fortinet FortiClient EMS SQL Injection Vulnerability — Fortinet FortiClient EMS

Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.

Added to KEV: 2024-03-25
Remediation due: 2024-04-15
Ransomware use: Known
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes: https://www.fortiguard.com/psirt/FG-IR-24-007; https://nvd.nist.gov/vuln/detail/CVE-2023-48788

Status: Analyzed
Published: 2024-03-12
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-89

Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

Affected configurations

• fortinet forticlient enterprise management server (>= 7.0.1 < 7.0.11) • fortinet forticlient enterprise management server (>= 7.2.0 < 7.2.3)

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References