medium6.7
CVE-2019-15708
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin c…
Impact
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiap | through 6.0.5 |
| Fortinet | Fortiap-S | through 6.0.5 Versions 6.2.0, 6.2.1 |
| Fortinet | Fortiap-U | through 6.0.0 |
| Fortinet | Fortiap-W2 | through 6.0.5 Versions 6.2.0, 6.2.1 |