CVE-2022-41328 is a security vulnerability with a severity rating of 7.1 HIGH, affecting Fortinet FortiOS systems. This vulnerability, known as an improper limitation of a pathname to a restricted directory ('path traversal'), allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.

How do I know if I'm affected?

If you're using Fortinet FortiOS, you might be affected by the vulnerability. To determine if you're at risk, check your FortiOS version. The affected versions are 6.0.0 to 6.0.16, 6.2.0 to 6.2.13, 6.4.0 to 6.4.11, 7.0.0 to 7.0.9, and 7.2.0 to 7.2.3. This vulnerability allows a privileged attacker to read and write files on your system through crafted CLI commands. If you're using one of the affected versions, it's important to take action to secure your system, although this paragraph doesn't cover the steps to fix the issue.

What should I do if I'm affected?

If you're affected by the vulnerability, it's crucial to update your FortiOS system. Upgrade to version 7.2.4, 7.0.10, 6.4.12, or 6.2.14, depending on your current version. Keep an eye on your system for unusual activity and report any suspicious behavior to your security provider.

Is CVE-2022-41328 in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, it is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, named Fortinet FortiOS Path Traversal Vulnerability was added to the catalog on March 14, 2023, with a due date of April 4, 2023. The required action is to apply updates according to the vendor's instructions. In simpler terms, this means that there is a known security issue with certain versions of FortiOS, and users need to update their systems to fix the problem.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-22, which involves improper limitation of a pathname allowing privileged attackers to read and write files via crafted commands. It affects several FortiOS versions, and mitigation involves upgrading to specific versions.

For more details

CVE-2022-41328 is a significant security vulnerability affecting Fortinet FortiOS systems. For a comprehensive understanding of its description, severity, technical details, and affected software configurations, refer to the NVD page and the resources listed below.

• FortiGuard Labs

• CISA's Binding Operational Directive 22-01

• CISA's Known Exploited Vulnerabilities Catalog