high7.8
CVE-2022-22301
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0 through 5.2.1 may a…
Impact
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0 through 5.2.1 may allow an authenticated attacker to execute unauthorized commands by running CLI commands with specifically crafted arguments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiap-C | Versions 5.2.0, 5.2.1, 5.4.0, 5.4.1, 5.4.2, 5.4.3 |