CVE-2019-15710

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.

Score

CVSS 3.1 7.2 High

Status

Modified - psirt@fortinet.com

Published

2019-10-31

Last modified

2024-10-25

Weaknesses

CWE-78

Affected products

• Fortiextender Firmware (Fortiguard)
• Fortiextender (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-19-273