---
id: 10215
title: "CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive"
cve: CVE-2023-34992
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/disclosures/cve-2023-34992-fortinet-fortisiem-command-injection-deep-dive/"
published_at: "2024-05-20T11:44:41Z"
tags: ["vulnerability-research", "command-injection", "fortinet"]
phying_url: "https://phying.com/item/10215"
lang: en
---

# CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive

## Summary

CVE-2023-34992 Fortinet FortiSIEM Command Injection Deep-Dive and Indicators of Compromise. This blog details a command injection vulnerability which allows an unauthenticated attacker to access the FortiSIEM server as root to execute arbitrary commands.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2023-34992
- **Published:** 2024-05-20T11:44:41Z
- **Original:** https://horizon3.ai/attack-research/disclosures/cve-2023-34992-fortinet-fortisiem-command-injection-deep-dive/
- **Phying News:** https://phying.com/item/10215