CVE-2022-39947
Status: ModifiedHigh (8.8)—
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.2, FortiADC version 6.2.0 through 6.2.3, FortiADC version version 6.1.0 through 6.1.6, FortiADC version 6.0.0 through 6.0.4, FortiADC version 5.4.0 through 5.4.5 may allow an attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Base score: 8.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.89%
- Percentile among all scored CVEs: 86
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-78
- CWE-78
References
Raw JSON (NVD)
Show
{
"id": "CVE-2022-39947",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-39947",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-10-23T14:12:02.386044Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@fortinet.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@fortinet.com",
"affectedData": [
{
"vendor": "Fortinet",
"product": "FortiADC",
"versions": [
{
"status": "affected",
"version": "7.0.0",
"versionType": "semver",
"lessThanOrEqual": "7.0.2"
},
{
"status": "affected",
"version": "6.2.0",
"versionType": "semver",
"lessThanOrEqual": "6.2.3"
},
{
"status": "affected",
"version": "6.1.0",
"versionType": "semver",
"lessThanOrEqual": "6.1.6"
},
{
"status": "affected",
"version": "6.0.0",
"versionType": "semver",
"lessThanOrEqual": "6.0.4"
},
{
"status": "affected",
"version": "5.4.0",
"versionType": "semver",
"lessThanOrEqual": "5.4.5"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-01-03T17:15:10.400",
"references": [
{
"url": "https://fortiguard.com/psirt/FG-IR-22-061",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@fortinet.com"
},
{
"url": "https://fortiguard.com/psirt/FG-IR-22-061",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@fortinet.com",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.2, FortiADC version 6.2.0 through 6.2.3, FortiADC version version 6.1.0 through 6.1.6, FortiADC version 6.0.0 through 6.0.4, FortiADC version 5.4.0 through 5.4.5 may allow an attacker to execute unauthorized code or commands via specifically crafted HTTP requests."
},
{
"lang": "es",
"value": "Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiADC versión 7.0.0 a 7.0.2, FortiADC versión 6.2.0 a 6.2.3, FortiADC versión 6.1.0 a 6.1.6 , FortiADC versión 6.0.0 a 6.0.4, FortiADC versión 5.4.0 a 5.4.5 puede permitir a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP específicamente manipuladas."
}
],
"lastModified": "2026-06-17T04:58:33.893",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54EBC78D-0358-474F-9654-3EF9950D563B",
"versionEndIncluding": "5.4.5",
"versionStartIncluding": "5.4.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ADB57D8-1ABE-4401-B1B0-4640A34C555A",
"versionEndIncluding": "6.0.4",
"versionStartIncluding": "6.0.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D31CF79E-6C56-4CD0-9DD2-FBB48D503786",
"versionEndIncluding": "6.1.6",
"versionStartIncluding": "6.1.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51C6A8FD-8D0D-4CBA-BA34-A34D12CE69ED",
"versionEndIncluding": "6.2.3",
"versionStartIncluding": "6.2.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D78A58AA-5F2F-4CC3-8299-EC320E36CF5E"
},
{
"criteria": "cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE3123F6-4360-45F8-9A90-C0D35CC73D1D"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@fortinet.com"
}