CVE-2021-24023

An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the…

High · published June 3, 2021

CVSS v3.1
7.8
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00750 · 54.4th percentile
Published
2021-06-03T10:30Z
EPSS history
Timeline
  • 03 JUN 10:30Z
    An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the…
    cvelistv5