imPC@ndo IT

Tracker / CVE-2019-15708

CVE-2019-15708

Medium 6.7

A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.

Affected products and versions

fortinet fortiap · … → 6.0.5
fortinet fortiap-s
fortinet fortiap-s · … → 6.0.5
fortinet fortiap-u · … → 6.0.0
fortinet fortiap-w2
fortinet fortiap-w2 · … → 6.0.5

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References