CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. It affects Fortinet. It may lead to a denial-of-service condition.
CVE
CVE-2022-39954
Severity
HIGH
CVSS
7.3
EPSS
0.55%
Fortinet
Original NVD Description
An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through 9.1.8, FortiNAC version 8.8.0 through 8.8.11, FortiNAC version 8.7.0 through 8.7.6, FortiNAC version 8.6.0 through 8.6.5, FortiNAC version 8.5.0 through 8.5.4, FortiNAC version 8.3.7 allows attacker to read arbitrary files or trigger a denial of service via specifically crafted XML documents.
Related CVEs
Other vulnerabilities affecting the same vendor(s)