Critical · published August 12, 2025
CVSS calls it critical at 9.8. It sits in the 99.3th percentile for exploit probability.
🚨 An unauthenticated attacker can execute commands on your FortiSIEM just by sending a crafted CLI request! 🔥 Think of it like a sneaky delivery person who knows just the right words to convince the front desk to hand over the keys to the server room — once in, they can do anything they want! This vulnerability allows anyone to run arbitrary code, potentially leading to full system compromise. Imagine an intruder not only gaining access but also having the ability to manipulate data, spy on activity, or even take control of critical infrastructure!
Think of it like a sneaky delivery person who knows just the right words to convince the front desk to hand over the keys to the server room — once in, they can do anything they want! The OS Command Injection flaw in Fortinet FortiSIEM lets an attacker bypass authentication and execute unauthorized commands through specially crafted command-line interface requests.
This vulnerability allows anyone to run arbitrary code, potentially leading to full system compromise. Imagine an intruder not only gaining access but also having the ability to manipulate data, spy on activity, or even take control of critical infrastructure! Immediate patching is crucial! Upgrade your FortiSIEM to version 7.3.2 or higher, and ensure your system configurations do not allow arbitrary command execution. Regularly review your security settings and logs for any suspicious activity! You've got this! Follow these steps to secure your system and keep those attackers at bay! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| fortinet/fortisiem | ≥ 5.4.0, < 6.7.10 | 6.7.10 |
| fortinet/fortisiem | ≥ 7.0.0, < 7.0.4 | 7.0.4 |
| fortinet/fortisiem | ≥ 7.1.0, < 7.1.8 | 7.1.8 |
| fortinet/fortisiem | ≥ 7.2.0, < 7.2.6 | 7.2.6 |
| fortinet/fortisiem | ≥ 7.3.0, < 7.3.2 | 7.3.2 |