CVE-2022-39953

Published: Mar 7, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, FortiNAC all versions 8.8, FortiNAC all versions 8.7, FortiNAC all versions 8.6, FortiNAC all versions 8.5, FortiNAC version 8.3.7 allows attacker to escalation of privilege via specially crafted commands.

Affected (9)

Products: Fortinet: Fortinac

Fortinet

1 product

Fortinac

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortinac	From 8.5.0 to 8.5.4
Fortinet Fortinac	From 8.6.0 to 8.6.5
Fortinet Fortinac	From 8.7.0 to 8.7.6
Fortinet Fortinac	From 8.8.0 to 8.8.11
Fortinet Fortinac	From 9.1.0 to 9.1.8
Fortinet Fortinac	From 9.2.0 to 9.2.6
Fortinet Fortinac	Version 8.3.7
Fortinet Fortinac	Version 9.4.0
Fortinet Fortinac	Version 9.4.1

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://fortiguard.com/psirt/FG-IR-22-309

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-22-309

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.