CVE-2022-41328

Description

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.

References

https://www.aha.org/system/files/media/file/2024/10/hc3%20tlp%20clear%20threat%20actor%20profile%20scattered%20spider-10-24-2024.pdf

https://thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html

https://cloud.google.com/blog/topics/threat-intelligence/uncovering-unc3886-espionage-operations

https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Year_in_Review_of_ZeroDays.pdf

https://meterpreter.org/cve-2023-34048-inside-the-zero-day-vulnerability-exploited-by-unc3886/

https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-vmware-bug-as-zero-day-for-two-years/

https://www.tenable.com/blog/volt-typhoon-cybersecurity-advisory

https://thehackernews.com/2023/03/from-ransomware-to-cyber-espionage-55.html

https://www.mandiant.com/resources/blog/zero-days-exploited-2022

https://fortiguard.com/psirt/FG-IR-22-369

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3