FortiWAN vulnerabilities

3 known vulnerabilities in FortiWAN from Fortinet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  FortiWAN: Improper Authentication

  CVE-2023-44252Dec 13, 2023Fortinet

  ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with cr

• 8.8 High severity

  FortiWAN: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-44251Dec 13, 2023Fortinet

  ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read

• 8.8 High severity

  FortiWAN: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-33869Feb 16, 2023FortinetEPSS 1.28%

  An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to e