CVE-2022-41328

Severity

MEDIUM

CVSS

6.5

EPSS

0.11912

Risk score

55.17

CISA KEV

Yes

PoC

Published

2023-03-14

Modified

2023-03-14

First seen

2026-08-07

Aliases

EUVD-2022-44535, GHSA-PRJ2-6G47-X68H

Products

Fortinet:FortiOS, Fortinet:FortiOS 6.0.0 ≤6.0.16, Fortinet:FortiOS 6.2.0 ≤6.2.13, Fortinet:FortiOS 6.4.0 ≤6.4.11, Fortinet:FortiOS 7.0.0 ≤7.0.9, Fortinet:FortiOS 7.2.0 ≤7.2.3

Sources

euvd EUVD-2022-44535
cisa.gov CVE-2022-41328

Description

Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2022-41328
https://www.fortiguard.com/psirt/FG-IR-22-369
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44535
https://fortiguard.com/psirt/FG-IR-22-369