CVE-2019-15708 - A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands

Back Back to CVE browser

MEDIUM

A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands

Published Mar 15, 2020

6.7

MEDIUM

CVSS 3.1

EPSS 0.62%

Description

A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.

Affected products

Vendor Fortinet Product Fortinet FortiAP Default
n/a
- Version
  below 6.0.0
  Status
  affected
  Constraints
  -
Vendor Fortinet Product Fortinet FortiAP-S/W2 Default
n/a
- Version
  6.0.5 and below
  Status
  affected
  Constraints
  -
- Version
  6.2.0
  Status
  affected
  Constraints
  -
- Version
  6.2.1
  Status
  affected
  Constraints
  -
Vendor Fortinet Product Fortinet FortiAP-U Default
n/a
- Version
  6.0.5 and below
  Status
  affected
  Constraints
  -