{"id":"CVE-2023-34993","published":"2023-10-10T16:51:08Z","modified":"2024-09-19T19:24:33Z","title":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM…","vendor":"Fortinet","product":"FortiWLM","tier":"core","eol":null,"affectedVersions":[{"vendor":"Fortinet","product":"FortiWLM","versions":[">= 8.6.0, <= 8.6.5",">= 8.5.0, <= 8.5.4"]}],"description":{"text":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.","provenance":"source","from":"CVE.org"},"summary":{"text":"A command injection flaw in the Fortinet FortiWLM wireless LAN management product, in its OS command handling within the web interface, stems from improper neutralization of special elements in user-supplied input. An unauthenticated attacker with network access to the product can execute unauthorized code or commands by sending a specially crafted HTTP GET request, with no user interaction or configuration changes required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T05:10:44Z"},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.21321,"percentile":0.976,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2024-04-14","exploitedFirstSeen":"2024-04-14","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-14&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-14"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-15&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-15"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-16&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-16"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-17&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-17"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-18&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-18"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-19&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-19"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-20&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-20"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-21&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-21"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-22&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-22"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-23&host_type=src&vulnerability=cve-2023-34993","date":"2024-04-23"}],"evidenceTotal":503,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-140","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-39031","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39031","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2023-34993","name":"Fortinet FortiWLM Unauthenticated Command Injection Vulnerability","severity":"critical","path":"http/cves/2023/CVE-2023-34993.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34993.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-10-10","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-34993","provenance":"source"},{"date":"2024-04-14","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-04-14&host_type=src&vulnerability=cve-2023-34993","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":66.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 931 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.52,"detail":"percentile 0.9760"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.72,"detail":"base score 9.6"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}