CVE-2023-34992
CRITICALFortiSIEM 6.6.0-6.6.2 - OS Command Injection via Crafted API Requests
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2023-34992. PoCs published by horizon3ai, dyeat, d0rb.
AI-analyzed exploit summary This is a working proof-of-concept exploit for CVE-2023-34992, a command injection vulnerability in Fortinet FortiSIEM. It leverages unauthenticated command injection via a crafted XML payload sent to the Phoenix Monitor service on port 7900.
Description
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via crafted API requests.
Exploits (3)
This is a working proof-of-concept exploit for CVE-2023-34992, a command injection vulnerability in Fortinet FortiSIEM. It leverages unauthenticated command injection via a crafted XML payload sent to the Phoenix Monitor service on port 7900.
The repository contains a functional Python exploit for CVE-2023-34992, which leverages unauthenticated command injection in Fortinet FortiSIEM via a crafted XML payload sent to the Phoenix Monitor service. The exploit constructs a malicious XML payload with command injection in the server_ip field and sends it over SSL to trigger remote code execution as root.
This PoC exploits CVE-2023-34992 by sending a crafted XML payload with command injection in the server_ip field to a Phoenix Monitor service. It checks for vulnerability by sending a command and analyzing the response.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H