CVE-2023-47534
Full vulnerability record from the local CVENow database.
Description
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.
Severity
HIGH
CVSS score
8.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2024-03-12 15:15:46.770000
Last modified
2026-10-22 14:17:33.987000
View original CVE JSON
{
"id": "CVE-2023-47534",
"sourceIdentifier": "[email protected]",
"published": "2024-03-12T15:15:46.770",
"lastModified": "2026-10-22T14:17:33.987",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets."
},
{
"lang": "es",
"value": "Una neutralización inadecuada de elementos de fórmula en un archivo csv en Fortinet FortiClientEMS versión 7.2.0 hasta 7.2.2, 7.0.0 hasta 7.0.10, 6.4.0 hasta 6.4.9, 6.2.0 hasta 6.2.9, 6.0.0 hasta 6.0.8 permite al atacante ejecutar código o comandos no autorizados a través de paquetes especialmente manipulados."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Fortinet",
"product": "FortiClientEMS",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.4.9:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.4.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.4.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.4.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.2.9:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.2.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.2.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.2.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.2.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.2.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.02.02:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:6.0.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.00.06:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.00.05:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.00.04:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.00.03:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.00.02:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.00.01:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientems:06.00.00:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.2.0",
"lessThanOrEqual": "7.2.2",
"versionType": "semver",
"status": "affected"
},
{
"version": "7.0.0",
"lessThanOrEqual": "7.0.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.4.7",
"lessThanOrEqual": "6.4.9",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.4.0",
"lessThanOrEqual": "6.4.4",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.2.6",
"lessThanOrEqual": "6.2.9",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.2.3",
"lessThanOrEqual": "6.2.4",
"versionType": "semver",
"status": "affected"
},
{
"version": "06.02.00",
"lessThanOrEqual": "06.02.02",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.0.8",
"status": "affected"
},
{
"version": "06.00.00",
"lessThanOrEqual": "06.00.06",
"versionType": "semver",
"status": "affected"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"vendor": "fortinet",
"product": "forticlient_endpoint_management_server",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:6.0.8:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "6.0.8",
"status": "affected"
}
]
},
{
"vendor": "fortinet",
"product": "forticlient_endpoint_management_server",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "7.2.0",
"lessThanOrEqual": "7.2.2",
"versionType": "semver",
"status": "affected"
},
{
"version": "7.0.0",
"lessThanOrEqual": "7.0.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.4.7",
"lessThanOrEqual": "6.4.9",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.4.0",
"lessThanOrEqual": "6.4.4",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.2.6",
"lessThanOrEqual": "6.2.9",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.2.0",
"lessThanOrEqual": "6.2.4",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.0.0",
"lessThanOrEqual": "6.0.6",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2024-03-21T04:00:36.803943Z",
"id": "CVE-2023-47534",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1236"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1236"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.0.0",
"versionEndIncluding": "6.0.8",
"matchCriteriaId": "AEDE19DC-94DB-4BEB-8439-C2BE06EF0625"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2.0",
"versionEndIncluding": "6.2.9",
"matchCriteriaId": "D16D1BDE-ED3A-472B-AE5D-9A22B330AD82"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.4.0",
"versionEndIncluding": "6.4.9",
"matchCriteriaId": "C4FE4D98-C047-4A51-BFD2-99ADB9C18BCD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.0.0",
"versionEndIncluding": "7.0.10",
"matchCriteriaId": "BFFE2A11-EE49-46A4-A5C5-4D575CF40C02"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.2.0",
"versionEndIncluding": "7.2.2",
"matchCriteriaId": "62920FE9-2E6A-48BB-A8F7-C57595C862C4"
}
]
}
]
}
],
"references": [
{
"url": "https://fortiguard.com/psirt/FG-IR-23-390",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://fortiguard.com/psirt/FG-IR-23-390",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}