Loïc Restoux

**Name of the Vulnerable Software and Affected Versions** FortiManager & FortiAnalyzer version 7.4.0 FortiManager & FortiAnalyzer versions 7.2.0 through 7.2.3 FortiManager & FortiAnalyzer versions 7.0.0 through 7.0.8 FortiManager & FortiAnalyzer versions 6.4.0 through 6.4.12 FortiManager & FortiAnalyzer versions 6.2.0 through 6.2.11 **Description** The issue is related to an improper neutralization of special elements used in an OS command, which may allow a local attacker with low privileges to execute unauthorized code via specifically crafted arguments to a CLI command. This is due to insufficient checking of arguments passed to a command. **Recommendations** For version 7.4.0, update to a version that includes a fix for this issue. For versions 7.2.0 through 7.2.3, update to a version that includes a fix for this issue. For versions 7.0.0 through 7.0.8, update to a version that includes a fix for this issue. For versions 6.4.0 through 6.4.12, update to a version that includes a fix for this issue. For versions 6.2.0 through 6.2.11, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the CLI command to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Cisco Enterprise NFV Infrastructure Software (NFVIS) (affected versions not specified) **Description** The issue is related to insufficient cryptographic signature verification of upgrade files in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS). This could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. A successful exploit could allow the attacker to fully compromise the Cisco NFVIS system. An attacker could exploit this by providing an administrator with an unauthentic upgrade file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Enterprise NFV Infrastructure Software (NFVIS) (affected versions not specified) **Description** The issue is related to multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) that could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. A vulnerability in the next-generation input/output (NGIO) function is associated with inadequate access control, which can be exploited by a remote attacker to elevate privileges by sending an API call from a virtual machine. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Enterprise NFV Infrastructure Software (NFVIS) (affected versions not specified) **Description** The issue concerns multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) that could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. One of the vulnerabilities is related to the incorrect restriction of XML links to external objects in the software import function, which could allow a remote attacker to disclose protected information using specially crafted XML code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FortiManager versions 6.2.7 and below, 6.4.5 and below FortiManager versions 6.2.x, 6.0.x, 5.6.x FortiAnalyzer versions 6.2.7 and below, 6.4.5 and below FortiAnalyzer versions 6.2.x, 6.0.x, 5.6.x FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below **Description** The command line interface of the affected software has multiple OS command injection vulnerabilities, which may allow a local authenticated and unprivileged user to execute arbitrary shell commands as root via specifically crafted CLI command parameters. This issue is related to the lack of measures to neutralize special elements used in operating system commands. **Recommendations** For FortiManager versions 6.2.7 and below, 6.4.5 and below, and all versions of 6.2.x, 6.0.x, and 5.6.x, consider disabling the command line interface until a patch is available. For FortiAnalyzer versions 6.2.7 and below, 6.4.5 and below, and all versions of 6.2.x, 6.0.x, and 5.6.x, consider disabling the command line interface until a patch is available. For FortiPortal versions 5.2.5 and below, 5.3.5 and below, and 6.0.4 and below, consider disabling the command line interface until a patch is available. As a temporary workaround, consider restricting access to the command line interface to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on NFX Series versions 18.1R1 through 18.2R3-S5 Juniper Networks Junos OS on NFX Series versions 18.3 through 18.3R3-S3 Juniper Networks Junos OS on NFX Series versions 18.4 through 18.4R3-S4 Juniper Networks Junos OS on NFX Series versions 19.1 through 19.1R2 Juniper Networks Junos OS on NFX Series versions 19.2 through 19.2R2 Description: The issue affects Juniper Networks Junos OS on NFX Series devices, allowing an attacker to elevate their privileges via the Junos Device Management Daemon (JDMD) process. This is a local code execution issue. The JDMD as used by Junos Node Slicing, such as External Servers and In-Chassis Junos Node Slicing on certain MX series devices, is not affected. Recommendations: For versions 18.1R1 through 18.2R3-S5, update to version 18.2R3-S5 or later. For versions 18.3 through 18.3R3-S3, update to version 18.3R3-S3 or later. For versions 18.4 through 18.4R3-S4, update to version 18.4R3-S4 or later. For versions 19.1 through 19.1R2, update to version 19.1R2 or later. For versions 19.2 through 19.2R2, update to version 19.2R2 or later.