CVE-2023-47534

A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.

CVSS v3 9.6 CRITICAL

9.6^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://fortiguard.com/psirt/FG-IR-23-390	Vendor Advisory
https://fortiguard.com/psirt/FG-IR-23-390	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:forticlient_endpoint_management_server::::::::
	cpe:2.3:a:fortinet:forticlient_endpoint_management_server::::::::
	cpe:2.3:a:fortinet:forticlient_endpoint_management_server::::::::
	cpe:2.3:a:fortinet:forticlient_endpoint_management_server::::::::
	cpe:2.3:a:fortinet:forticlient_endpoint_management_server::::::::

History

22 Oct 2026, 14:17

Type	Values Removed	Values Added
Summary	(en) A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets.	(en) A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.

Information

Published : 2024-03-12 15:15

Updated : 2026-10-22 14:17

NVD link : CVE-2023-47534

Mitre link : CVE-2023-47534

CVE.ORG link : CVE-2023-47534

JSON object : View

Products Affected

fortinet

forticlient_endpoint_management_server

CWE

CWE-1236

Improper Neutralization of Formula Elements in a CSV File

{"id": "CVE-2023-47534", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-47534", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2024-03-21T04:00:36.803943Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@fortinet.com", "affectedData": [{"cpes": ["cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.4.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.4.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.4.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.2.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.2.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.2.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.2.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.02.02:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:6.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.00.06:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.00.05:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.00.04:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.00.03:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.00.02:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.00.01:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:06.00.00:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiClientEMS", "versions": [{"status": "affected", "version": "7.2.0", "versionType": "semver", "lessThanOrEqual": "7.2.2"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.0.10"}, {"status": "affected", "version": "6.4.7", "versionType": "semver", "lessThanOrEqual": "6.4.9"}, {"status": "affected", "version": "6.4.0", "versionType": "semver", "lessThanOrEqual": "6.4.4"}, {"status": "affected", "version": "6.2.6", "versionType": "semver", "lessThanOrEqual": "6.2.9"}, {"status": "affected", "version": "6.2.3", "versionType": "semver", "lessThanOrEqual": "6.2.4"}, {"status": "affected", "version": "06.02.00", "versionType": "semver", "lessThanOrEqual": "06.02.02"}, {"status": "affected", "version": "6.0.8"}, {"status": "affected", "version": "06.00.00", "versionType": "semver", "lessThanOrEqual": "06.00.06"}], "defaultStatus": "unaffected"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:a:fortinet:forticlient_endpoint_management_server:6.0.8:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "forticlient_endpoint_management_server", "versions": [{"status": "affected", "version": "6.0.8"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "forticlient_endpoint_management_server", "versions": [{"status": "affected", "version": "7.2.0", "versionType": "semver", "lessThanOrEqual": "7.2.2"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.0.10"}, {"status": "affected", "version": "6.4.7", "versionType": "semver", "lessThanOrEqual": "6.4.9"}, {"status": "affected", "version": "6.4.0", "versionType": "semver", "lessThanOrEqual": "6.4.4"}, {"status": "affected", "version": "6.2.6", "versionType": "semver", "lessThanOrEqual": "6.2.9"}, {"status": "affected", "version": "6.2.0", "versionType": "semver", "lessThanOrEqual": "6.2.4"}, {"status": "affected", "version": "6.0.0", "versionType": "semver", "lessThanOrEqual": "6.0.6"}], "defaultStatus": "unaffected"}]}], "published": "2024-03-12T15:15:46.770", "references": [{"url": "https://fortiguard.com/psirt/FG-IR-23-390", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}, {"url": "https://fortiguard.com/psirt/FG-IR-23-390", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-1236"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1236"}]}], "descriptions": [{"lang": "en", "value": "A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets."}, {"lang": "es", "value": "Una neutralizaci\u00f3n inadecuada de elementos de f\u00f3rmula en un archivo csv en Fortinet FortiClientEMS versi\u00f3n 7.2.0 hasta 7.2.2, 7.0.0 hasta 7.0.10, 6.4.0 hasta 6.4.9, 6.2.0 hasta 6.2.9, 6.0.0 hasta 6.0.8 permite al atacante ejecutar c\u00f3digo o comandos no autorizados a trav\u00e9s de paquetes especialmente manipulados."}], "lastModified": "2026-10-22T14:17:33.987", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEDE19DC-94DB-4BEB-8439-C2BE06EF0625", "versionEndIncluding": "6.0.8", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D16D1BDE-ED3A-472B-AE5D-9A22B330AD82", "versionEndIncluding": "6.2.9", "versionStartIncluding": "6.2.0"}, {"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4FE4D98-C047-4A51-BFD2-99ADB9C18BCD", "versionEndIncluding": "6.4.9", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFFE2A11-EE49-46A4-A5C5-4D575CF40C02", "versionEndIncluding": "7.0.10", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62920FE9-2E6A-48BB-A8F7-C57595C862C4", "versionEndIncluding": "7.2.2", "versionStartIncluding": "7.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}