{"id":"CVE-2023-34992","published":"2023-10-10T16:50:21Z","modified":"2026-01-14T13:47:28Z","title":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…","vendor":"Fortinet","product":"FortiSIEM","tier":"core","eol":null,"affectedVersions":[{"vendor":"Fortinet","product":"FortiSIEM","versions":["7.0.0",">= 6.7.0, <= 6.7.5",">= 6.6.0, <= 6.6.3",">= 6.5.0, <= 6.5.1",">= 6.4.0, <= 6.4.2"]}],"description":{"text":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet  allows attacker to execute unauthorized code or commands via crafted API requests.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is an OS command injection weakness (improper neutralization of special elements used in an OS command) in Fortinet's FortiSIEM product. An attacker who can send crafted API requests to the affected component can execute unauthorized code or commands, and the vector indicates this is reachable over the network with low complexity, requiring no privileges and no user interaction.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:11:58Z"},"cvss":{"score":9.7,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:X/RC:X","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.81698,"percentile":0.99642,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":1,"pulses":[{"name":"ACTUALIZACIÓN | FortiSIEM: inyección remota de múltiples comandos del sistema operativo no autenticado","url":"https://otx.alienvault.com/pulse/65c545d02f056b58a958c869","created":"2024-02-08"}],"provenance":"machine"},"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-130","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-39030","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39030","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2024-05-17","earliestUrl":"https://github.com/horizon3ai/CVE-2023-34992","repos":[{"name":"horizon3ai/CVE-2023-34992","url":"https://github.com/horizon3ai/CVE-2023-34992","stars":27,"created":"2024-05-17"},{"name":"d0rb/CVE-2023-34992-Checker","url":"https://github.com/d0rb/CVE-2023-34992-Checker","stars":0,"created":"2024-05-21"}]},"nuclei":[{"id":"CVE-2023-34992","name":"Fortinet FortiSIEM - Unauthenticated Command Injection","severity":"critical","path":"network/cves/2023/CVE-2023-34992.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-34992.yaml"}],"first":{"date":"2024-05-17","source":"PoC-in-GitHub","url":"https://github.com/horizon3ai/CVE-2023-34992"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-10-10","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-34992","provenance":"source"},{"date":"2024-05-17","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/horizon3ai/CVE-2023-34992","provenance":"source"}],"speed":{"daysToPublicExploit":220,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":32.4,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.93,"detail":"percentile 0.9964"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":6.79,"detail":"base score 9.7"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}