CVE-2019-15708
published 2020-03-15CVE-2019-15708: A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin…
medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortiap | <= 6.0.5 | — |
| fortinet | fortiap | — | — |
| fortinet | fortiap-s | <= 6.0.5 | — |
| fortinet | fortiap-s | — | — |
| fortinet | fortiap-s | — | — |
| fortinet | fortiap-s | — | — |
| fortinet | fortiap-u | <= 6.0.0 | — |
| fortinet | fortiap-u | — | — |
| fortinet | fortiap-w2 | <= 6.0.5 | — |
| fortinet | fortiap-w2 | — | — |
| fortinet | fortiap-w2 | — | — |
| fortinet | fortiap-w2 | — | — |
| fortinet | fortinet_fortiap | — | — |
| fortinet | fortinet_fortiap-s_w2 | — | — |
| fortinet | fortinet_fortiap-s_w2 | — | — |
| fortinet | fortinet_fortiap-s_w2 | — | — |
| fortinet | fortinet_fortiap-u | — | — |