CVE-2022-35845

HIGH · CVSS 7.8 EPSS 1.11%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-35845

Severity

HIGH

CVSS

7.8

EPSS

1.11%

Original NVD Description

Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiTester 7.1.0, 7.0 all versions, 4.0.0 through 4.2.0, 2.3.0 through 3.9.1 may allow an authenticated attacker to execute arbitrary commands in the underlying shell.