CVE-2022-27486

Name of the Vulnerable Software and Affected Versions FortiDDoS versions 4.5.0 through 5.5.1 FortiDDoS-F versions 6.1.0 through 6.3.1

Description The issue is related to an improper neutralization of special elements used in an operating system command, also known as 'os command injection', in the command-line interface (CLI) of Fortinet FortiDDoS and FortiDDoS-F. This could allow an authenticated attacker to execute arbitrary shell code as root via execute CLI commands.

Recommendations For FortiDDoS versions 4.5.0 through 5.5.1, update to a version outside of the affected range. For FortiDDoS-F versions 6.1.0 through 6.3.1, update to a version outside of the affected range. As a temporary workaround, consider restricting access to the execute CLI commands until a patch is available.