---
title: SECURITY ALERT: FortiClient EMS - (CVE-2023-48788 & CVE-2023-47534)
description: "Fortinet releases 2 critical vulnerabilities: (CVE-2023-48788) and (CVE-2023-47534)"
image: https://blog.systemsengineering.com/hubfs/Security%20Alert_Systems%20Engineering.png
---

[![header-logo](https://blog.systemsengineering.com/hs-fs/hubfs/header-logo.png?width=138&name=header-logo.png)](https://www.systemsengineering.com)

888.624.6737

<https://www.linkedin.com/company/systemsengineering-><https://www.facebook.com/systemsengineeringinc>

![Spyglass](https://www.systemsengineering.com/wp-content/uploads/search-google-e1751908066340.png)

- [Careers](https://www.systemsengineering.com/about/careers/)
- [Blog](https://blog.systemsengineering.com/blog)
- [Events](https://www.systemsengineering.com/news-resources/events/)
- [Case Studies](https://www.systemsengineering.com/case-studies/)
- [Client Center](https://www.systemsengineering.com/client-center/)
- [CONTACT](https://www.systemsengineering.com/about/contact/)

- IT Services 
    - [Managed IT](https://www.systemsengineering.com/managed-it/) 
          - [IT Essentials](https://www.systemsengineering.com/managed-it/it-essentials/)
          - [Microsoft Services](https://www.systemsengineering.com/managed-it/microsoft-services/)
          - [Modern Workplace](https://www.systemsengineering.com/managed-it/modern-desktop/)
          - [Help Desk](https://www.systemsengineering.com/managed-it/help-desk/)
          - [Network Assessment](https://www.systemsengineering.com/managed-it/network-assessment/)
    - [IT Consulting Services](https://www.systemsengineering.com/it-consulting-services/) 
          - [Compliance](https://www.systemsengineering.com/compliance)
          - [IT Policies-as-a-Service](https://www.systemsengineering.com/it-consulting-services/it-policies-as-a-service/)
          - [Virtual CIO](https://www.systemsengineering.com/it-consulting-services/virtual-cio/)
          - [Engineering Services](https://www.systemsengineering.com/it-consulting-services/engineering-services/)
          - [Project Management](https://www.systemsengineering.com/it-consulting-services/project-management/)
          - [Business Continuity](https://www.systemsengineering.com/it-consulting-services/business-continuity/)
          - [Assessments & Gap Analyses](https://www.systemsengineering.com/it-consulting-services/get-it-assessed/)
    - [Software Services](https://www.systemsengineering.com/software-services/) 
          - [Application Development](https://www.systemsengineering.com/software-services/application-development/)
          - [SharePoint](https://www.systemsengineering.com/software-services/sharepoint/)
          - [Database Services](https://www.systemsengineering.com/software-services/database-services/)
- [IT Security](https://www.systemsengineering.com/security/) 
    - [Adaptive Cybersecurity Framework (aCSF)](https://www.systemsengineering.com/se-adaptive-cybersecurity-framework-acsf/)
    - [Cloud Security](https://www.systemsengineering.com/security/cloud-security/) 
          - [Cloud Security Resources](https://www.systemsengineering.com/security/cloud-security/cloud-security-resources/)
    - [Security Awareness Training](https://www.systemsengineering.com/security/security-awareness-training/)
    - [Cybersecurity Risk Assessment](https://www.systemsengineering.com/security/cybersecurity-risk-assessment/)
- [Compliance](https://www.systemsengineering.com/compliance/) 
    - [Cybersecurity Maturity Model Certification (CMMC)](https://www.systemsengineering.com/compliance/cmmc-compliance/) 
          - [CMMC Compliance Service](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-compliance-service/)
          - [CMMC Resources](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-resources/)
    - [National Credit Union Administration (NCUA)](https://www.systemsengineering.com/compliance/ncua/)
- [Cloud Services](https://www.systemsengineering.com/cloud-services/) 
    - [Cloud Management](https://www.systemsengineering.com/cloud-services/cloud-management/)
    - [Cloud Security](https://www.systemsengineering.com/security/cloud-security/)
    - [Office 365 Migration & Support](https://www.systemsengineering.com/cloud-services/office-365-migration-support/) 
          - [Office 365 Backup](https://www.systemsengineering.com/cloud-services/office-365-migration-support/office-365-backup/)
    - [Cloud Assessment](https://www.systemsengineering.com/cloud-services/cloud-assessment/)
- [Industries](https://www.systemsengineering.com/industries/) 
    - [Construction](https://www.systemsengineering.com/industries/construction/)
    - [Education](https://www.systemsengineering.com/industries/education/)
    - [Financial Services](https://www.systemsengineering.com/industries/financial-services/) 
          - [Accountants & Wealth Managers](https://www.systemsengineering.com/industries/financial-services/accountants-wealth-managers/)
          - [Banks](https://www.systemsengineering.com/industries/financial-services/banks/)
          - [Credit Unions](https://www.systemsengineering.com/industries/financial-services/credit-unions/)
    - [Government](https://www.systemsengineering.com/industries/government/)
    - [Healthcare](https://www.systemsengineering.com/industries/healthcare/)
    - [Law Firms](https://www.systemsengineering.com/industries/legal/)
    - [Manufacturers](https://www.systemsengineering.com/industries/manufacturer/)
    - [Nonprofit](https://www.systemsengineering.com/industries/nonprofits/)
- [About](https://www.systemsengineering.com/about/) 
    - [Leadership](https://www.systemsengineering.com/about/leadership/)
    - [Our Difference](https://www.systemsengineering.com/about/our-difference/)
    - [Our Partners](https://www.systemsengineering.com/about/our-partners/)
    - [Culture](https://www.systemsengineering.com/culture/)
    - [Contact](https://www.systemsengineering.com/about/contact/)

- Managed IT 
    - [Overview](https://www.systemsengineering.com/managed-it/)
    - [IT Essentials](https://www.systemsengineering.com/managed-it/it-essentials/)
    - [Microsoft Services](https://www.systemsengineering.com/managed-it/microsoft-services/)
    - [Modern Workplace](https://www.systemsengineering.com/managed-it/modern-workplace/)
    - [Help Desk](https://www.systemsengineering.com/managed-it/help-desk/)
    - [Network Assesment](https://www.systemsengineering.com/managed-it/network-assessment/)
- IT Consulting Services 
    - [Overview](https://www.systemsengineering.com/it-consulting-services/)
    - [Virtual CIO](https://www.systemsengineering.com/it-consulting-services/virtual-cio/)
    - [CMMC Compliance](https://www.systemsengineering.com/compliance/cmmc-compliance/)
    - [IT Policies-as-a-Service](https://www.systemsengineering.com/it-consulting-services/it-policies-as-a-service/)
    - [Engineering Services](https://www.systemsengineering.com/it-consulting-services/engineering-services/)
    - [Project Management](https://www.systemsengineering.com/it-consulting-services/project-management/)
    - [Business Continuity](https://www.systemsengineering.com/it-consulting-services/business-continuity/)
    - [Assessments & Gap Analyses](https://www.systemsengineering.com/it-consulting-services/get-it-assessed/)
- Software Services 
    - [Overview](https://www.systemsengineering.com/software-services/)
    - [Application Development](https://www.systemsengineering.com/software-services/application-development/)
    - [SharePoint](https://www.systemsengineering.com/software-services/sharepoint/)
    - [Database Services](https://www.systemsengineering.com/software-services/database-services/)
- IT Security 
    - [Overview](https://www.systemsengineering.com/security/)
    - [Adaptive Cybersecurity Framework (aCSF)](https://www.systemsengineering.com/se-adaptive-cybersecurity-framework-acsf/)
    - Cloud Security 
          - [Service Overview](https://www.systemsengineering.com/security/cloud-security/)
          - [Cloud Security Resources](https://www.systemsengineering.com/security/cloud-security/cloud-security-resources/)
    - [Security Awareness Training](https://www.systemsengineering.com/security/security-awareness-training/)
    - [Cybersecurity Risk Assesment](https://www.systemsengineering.com/security/cybersecurity-risk-assessment/)
- Compliance 
    - [Overview](https://www.systemsengineering.com/compliance/)
    - [Cybersecurity Maturity Model Certification (CMMC)](https://www.systemsengineering.com/compliance/cmmc-compliance/) 
          - [CMMC Compliance Service](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-compliance-service/)
          - [CMMC Gap Analysis](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-gap-analysis/)
          - [CMMC Resources Hub](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-resources/)
    - [National Credit Union Administration (NCUA)](https://www.systemsengineering.com/compliance/ncua/)
- Cloud Services 
    - [Overview](https://www.systemsengineering.com/cloud-services/)
    - [Cloud Management](https://www.systemsengineering.com/cloud-services/cloud-management/)
    - [Cloud Security](https://www.systemsengineering.com/cloud-services/cloud-migration/)
    - Office 365 
          - [Office 365 Migration & Support](https://www.systemsengineering.com/cloud-services/office-365-migration-support/)
          - [Office 365 Backup](https://www.systemsengineering.com/cloud-services/office-365-migration-support/office-365-backup/)
    - [Cloud Assessment](https://www.systemsengineering.com/cloud-services/cloud-assessment/)
- Industries 
    - [Overview](https://www.systemsengineering.com/industries/)
    - [Construction](https://www.systemsengineering.com/industries/construction/)
    - [Education](https://www.systemsengineering.com/industries/education/)
    - [Financial Services](https://www.systemsengineering.com/industries/financial-services/) 
          - [Banks](https://www.systemsengineering.com/industries/financial-services/banks/)
          - [Credit Unions](https://www.systemsengineering.com/industries/financial-services/credit-unions/)
          - [Accountants & Wealth Managers](https://www.systemsengineering.com/industries/financial-services/accountants-wealth-managers/)
    - [Government](https://www.systemsengineering.com/industries/government/)
    - [Healthcare](https://www.systemsengineering.com/industries/healthcare/)
    - [Legal](https://www.systemsengineering.com/industries/legal/)
    - [Manufacturers](https://www.systemsengineering.com/industries/manufacturers/)
    - [Nonprofits](https://www.systemsengineering.com/industries/nonprofits/)
- About 
    - [Overview](https://www.systemsengineering.com/about/)
    - [Leadership](https://www.systemsengineering.com/about/leadership/)
    - [Our Difference](https://www.systemsengineering.com/about/our-difference/)
    - [Employee-Owned](https://www.systemsengineering.com/about/esop/)
    - [Our Partners](https://www.systemsengineering.com/about/our-partners/)
    - Careers & Internships 
          - [Openings](https://www.systemsengineering.com/about/careers/)
          - [Benefits](https://www.systemsengineering.com/about/careers/benefits/)
          - [Internships](https://www.systemsengineering.com/about/careers/internships/)
    - [Culture](https://www.systemsengineering.com/culture/)
- [Case Studies](https://www.systemsengineering.com/case-studies/)
- [Blog](https://blog.systemsengineering.com/blog)
- [Events](https://www.systemsengineering.com/events/)
- [Client Center](https://www.systemsengineering.com/client-center/)
- [Contact](https://www.systemsengineering.com/about/contact/)

888.624.6737

[Email Us](mailto:info@systemsengineering.com)

![syse-blog-header](https://blog.systemsengineering.com/hs-fs/hubfs/Logos/syse-blog-header.jpg?width=1440&name=syse-blog-header.jpg "syse-blog-header")

# SECURITY ALERT: FortiClient EMS - (CVE-2023-48788 & CVE-2023-47534)

[![Share on facebook](https://blog.systemsengineering.com/hs-fs/hubfs/facebook-color.png?width=60&name=facebook-color.png)](http://www.facebook.com/share.php?u=https://blog.systemsengineering.com/blog/forticlient-ems-cve-2023-48788-cve-2023-47534&utm_medium=social&utm_source=facebook) [![Share on linkedin](https://blog.systemsengineering.com/hs-fs/hubfs/linkedin-color.png?width=60&name=linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.systemsengineering.com/blog/forticlient-ems-cve-2023-48788-cve-2023-47534&utm_medium=social&utm_source=linkedin) [![Share on email](https://blog.systemsengineering.com/hs-fs/hubfs/email-color.png?width=60&name=email-color.png)](mailto:?subject=Check%20out%20https://blog.systemsengineering.com/blog/forticlient-ems-cve-2023-48788-cve-2023-47534&utm_medium=social&utm_source=email%20&body=Check%20out%20https://blog.systemsengineering.com/blog/forticlient-ems-cve-2023-48788-cve-2023-47534&utm_medium=social&utm_source=email) 

 March 15, 2024 | Posted in:

[Security Bulletins & Alerts](https://blog.systemsengineering.com/blog/topic/security-bulletins-alerts)

Posted by [Systems Engineering](https://blog.systemsengineering.com/blog/author/systems-engineering)

Systems Engineering is aware of two vulnerabilities, the Fortinet FortiClient EMS Pervasive SQL injection in DAS component ([CVE-2023-48788](https://www.fortiguard.com/psirt/FG-IR-24-007)) and FortiClient EMS - CSV injection in the log download feature ([CVE-2023-47534](https://www.fortiguard.com/psirt/FG-IR-23-390)).

Fortinet rates this vulnerability as CRITICAL. 

### Description

Fortinet has announced two vulnerabilities, one in the SQL Database portion of FortiClient EMS that could allow an unauthenticated, remote attacker to execute arbitrary code or commands (CVE-2023-48788). A successful attack would allow a malicious attacker to run administrative commands on the FortiClient EMS, compromising the device's integrity, and the devices it manages.

The other vulnerability is in relation to the CSV Log Download portion of FortiClient EMS, which could allow an unauthenticated, remote attacker to execute arbitrary code or commands (CVE-2023-47534). A successful attack would allow a malicious attacker to run administrative commands on the FortiClient EMS, compromising the device's integrity, and the devices it manages.

Please note that this is potentially being exploited in the wild, according to Fortinet.

### Scope

This vulnerability is specific to Fortinet FortiClient EMS. From the Fortinet Product Security Incident Response Team (PSIRT) Advisory webpage, the following systems are affected:

CVE-2023-48788:  
![](https://blog.systemsengineering.com/hs-fs/hubfs/image-png-Mar-15-2024-04-54-14-9305-PM.png?width=975&height=135&name=image-png-Mar-15-2024-04-54-14-9305-PM.png)

CVE-2023-47534:  
![](https://blog.systemsengineering.com/hs-fs/hubfs/image-png-Mar-15-2024-04-54-51-1131-PM.png?width=975&height=255&name=image-png-Mar-15-2024-04-54-51-1131-PM.png)

### Course of Action

Fortinet has released a patch to remediate affected systems.

Given the critical nature of these vulnerabilities, Systems Engineering is proactively addressing the issue by applying patches for all clients affected by the FortiClient EMS vulnerability, regardless of service type. Our team is actively engaging with clients to provide detailed information on the timeline for remediation efforts.

If you're unsure whether these vulnerabilities impact you or need help with patching, please don't hesitate to reach out to Systems Engineering Customer Service at 207.772.4199. Our team is ready to assist you in safeguarding your system against potential threats.

If you are a Systems Engineering client and have any inquiries regarding this Security Alert, we encourage you to reach out to your dedicated Account Manager for further assistance.

### Join the Conversation!

### Posts by Category

- [IT Solutions & Support (70)](https://blog.systemsengineering.com/blog/topic/it-solutions-support)
- [Announcements (64)](https://blog.systemsengineering.com/blog/topic/announcements)
- [Security Bulletins & Alerts (59)](https://blog.systemsengineering.com/blog/topic/security-bulletins-alerts)
- [Cybersecurity (55)](https://blog.systemsengineering.com/blog/topic/cybersecurity)
- [Business Transformation (30)](https://blog.systemsengineering.com/blog/topic/business-transformation)
- [Cloud Security (27)](https://blog.systemsengineering.com/blog/topic/cloud-security)
- [Workforce Enablement (21)](https://blog.systemsengineering.com/blog/topic/workforce-enablement)
- [Compliance (17)](https://blog.systemsengineering.com/blog/topic/compliance)
- [Network Security (13)](https://blog.systemsengineering.com/blog/topic/network-security)
- [Artificial Intelligence (10)](https://blog.systemsengineering.com/blog/topic/artificial-intelligence)

### Follow Us On Social

<https://www.linkedin.com/company/systemsengineering-> <https://twitter.com/sysengineering> <https://www.facebook.com/systemsengineeringinc>

### Contact Us

[888.624.6737](tel:888.624.6737)  
[info@systemsengineering.com](mailto:info@systemsengineering.com)

### Connect With Us

<https://www.linkedin.com/company/systemsengineering-> <https://www.facebook.com/systemsengineeringinc>

### Receive Our Blog

- [IT Services](https://www.systemsengineering.com/)
- [IT Security](https://www.systemsengineering.com/security/)
- [Compliance](https://www.systemsengineering.com/compliance/)
- [Cloud Services](https://www.systemsengineering.com/cloud-services/)
- [Industries](https://www.systemsengineering.com/industries/)
- [About](https://www.systemsengineering.com/about/)

- [Careers](https://www.systemsengineering.com/about/careers/)
- [White Papers](https://www.systemsengineering.com/white-papers/)
- [Case Studies](https://www.systemsengineering.com/case-studies/)
- [Blog](https://blog.systemsengineering.com/blog)
- [Events](https://www.systemsengineering.com/news-resources/events/)
- [Client Center](https://www.systemsengineering.com/client-center/)

![Ft-logo](https://blog.systemsengineering.com/hs-fs/hubfs/Ft-logo.png?width=105&name=Ft-logo.png)

 

 

888.624.6737 | [info@systemsengineering.com](mailto:info@systemsengineering.com)

Copyright 2025 Systems Engineering. All Rights Reserved. [Privacy Policy](https://www.systemsengineering.com/privacy-policy) [Support](https://www.systemsengineering.com/support/) [Trust Center](https://systems.app.ctrlmap.com/tp/trust/portal/links?puid=8010ba57-5a2e-40b4-9c56-2c18873c9e5f&trustPortalId=MQ==&code=4642)