CVE-2023-37937

Summary

CVE-2023-37937 is a critical vulnerability affecting multiple FortiSwitch versions, including 7.4.0, 7.2.0 through 7.2.5, 7.0.0 through 7.0.7, 6.4.0 through 6.4.13, and 6.2.0 through 6.2.7, as well as 6.0.0 through 6.0.7. Hackers can exploit this 'os command injection' flaw to execute unauthorized code or issue commands via the FortiSwitch CLI, potentially leading to significant security breaches. This vulnerability arises from an improper handling of special elements in operating system commands, putting impacted FortiSwitch installations at risk. Users are strongly advised to apply the relevant patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.