External Control of File Name or Path in FortiNAC - CVE-2022-39952
Published: February 19, 2023 / Updated: May 7, 2023
Vulnerability identifier: #VU72373
CSH Severity: Critical
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-39952
CWE-ID: CWE-73
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to application allows an attacker to control path of the files to write within the keyUpload scriptlet. A remote non-authenticated attacker can send a specially crafted HTTP request and upload arbitrary files to the system.
Successful exploitation of the vulnerability may allow an attacker to compromise the affected system.
Affected software
FortiNAC
How to mitigate CVE-2022-39952
Install updates from vendor's website.
FortiNAC - addressed in versions 9.1.8, 9.2.6, 9.4.1