CVE-2023-48788
Fortinet FortiClient EMS SQL Injection Vulnerability
Published Mar 12, 2024 · updated Jun 16, 2026 · fortinet forticlient enterprise management server
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
Timeline
Detection, updates, and resolution for this record.
Mar 12, 2024 · Catalog
Detected
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
Mar 25, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Apr 15, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Apr 15, 2024
Affected
- cpe fortinet/forticlient enterprise management serverversion unspecified
- vendor Fortinet FortiClient EMSversion unspecified
Sources
- CISA KEVCVE-2023-48788
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
cisa.gov - CVE.orgCVE-2023-48788
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-48788
30-day exploitation probability 98.4%
first.org - Metasploit Modulesexploit_windows/http/forticlient_ems_fctid_sqli
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2023-48788
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
nvd.nist.gov