Fortinet Fortiap-W2 vulnerabilities

7 known vulnerabilities affecting fortinet/fortiap-w2.

Total CVEs

7

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH4MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2024-26012HIGHCVSS 7.8≥ 6.4.0, < 7.2.4≥ 7.4.0, < 7.4.3+4 more2025-01-14

CVE-2024-26012 [MEDIUM] CWE-78 CVE-2024-26012: A improper neutralization of special elements used in an os command ('os command injection') in Fort A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2 all verisons, and 6.4.0 through 6.4.9, FortiAP-W2 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.3, and 7.4.0 through 7.4.2, FortiAP 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.3, and 7.4.0 through 7.4.2 allow a loca

CVE-2023-25608MEDIUMCVSS 6.5≥ 6.0.0, ≤ 7.0.1≥ 7.0.3, < 7.0.6+6 more2023-09-13

CVE-2023-25608 [MEDIUM] CWE-792 CVE-2023-25608: An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all versions; FortiAP 7.2.0 through 7.2.1, 7.0.0 through 7.0.

CVE-2022-29058HIGHCVSS 7.8≥ 6.0.0, ≤ 6.0.6≥ 6.2.0, ≤ 6.2.6+3 more2022-09-06

CVE-2022-29058 [HIGH] CWE-89 CVE-2022-29058: An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0, FortiAP-S 6.0.0 through 6.4.7, FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0 and FortiAP-U 5.4.0 through 6.2.3 may allow an authenticated attacker t

CVE-2021-26106HIGHCVSS 7.8≥ 6.2.4, < 6.2.62021-07-09

CVE-2021-26106 [HIGH] CWE-78 CVE-2021-26106: An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's cons An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments.

CVE-2019-15709MEDIUMCVSS 6.5≤ 6.0.5≥ 6.2.0, ≤ 6.2.22020-06-01

CVE-2019-15709 [MEDIUM] CWE-20 CVE-2019-15709: An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and be An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI.

CVE-2019-17657HIGHCVSS 7.5fixed in 6.2.22020-04-07

CVE-2019-17657 [HIGH] CWE-400 CVE-2019-17657: An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6 An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP

CVE-2019-15708MEDIUMCVSS 6.7≤ 6.0.5v6.2.0+1 more2020-03-15

CVE-2019-15708 [MEDIUM] CWE-78 CVE-2019-15708: A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.