Description (CNA)
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / Fortinet FortiAP-S/W2 | affected 6.2.1; affected 6.2.0; affected 6.0.5 and below |
| Fortinet / Fortinet FortiAP-U | affected 6.0.5 and below |
| Fortinet / Fortinet FortiAP | affected below 6.0.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.