CVE-2021-26106 — Fortinet / Fortinet FortiAP-W2, FortiAP-S, FortiAP

CVE-2021-26106

Fortinet / Fortinet FortiAP-W2, FortiAP-S, FortiAP PUBLISHED

Description (CNA)

An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiAP-W2, FortiAP-S, FortiAP	affected FortiAP-W2 6.2.4 through 6.2.5; FortiAP-S 6.2.4 through 6.2.5; FortiAP 6.4.1 through 6.4.5

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-20-210

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-20-210

CISA-ADP

No English description supplied.

No references supplied.