CVE-2022-41328
Published 2023-03-07 · Updated 2026-06-17 · Source psirt@fortinet.com
Summary
CVE-2022-41328 is a medium-severity (CVSS 6.7) vulnerability in Fortinet FortiOS. CISA added it to the Known Exploited Vulnerabilities catalog on March 14, 2023, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by April 4, 2023. CISA does not currently list it as used in ransomware campaigns. Fortinet has 32 vulnerabilities in the KEV catalog, 14 of them linked to ransomware.
All 32 known-exploited Fortinet vulnerabilities →Description
A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Fortinet — FortiOS
Name: Fortinet FortiOS Path Traversal Vulnerability
Date added: 2023-03-14 · Due: 2023-04-04
Required action: Apply updates per vendor instructions.