CVE-2019-15708
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - psirt@fortinet.com
- Published
- 2020-03-15
- Last modified
- 2024-10-25
- Weaknesses
- CWE-78
Affected products
- Fortiap (Fortinet)
- Fortiap-s (Fortinet)
- Fortiap-u (Fortinet)
- Fortiap-w2 (Fortinet)
- Fortinet Fortiap (Fortinet)
- Fortinet Fortiap-sw2 (Fortinet)
- Fortinet Fortiap-u (Fortinet)
References
- https://fortiguard.com/psirt/FG-IR-19-209
