CVE-2019-15708

Description

A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.

Reserved 2019-08-27 | Published 2020-03-15 | Updated 2024-10-25 | Assigner fortinet

Problem types

Execute unauthorized code or commands

Product status

6.2.1
affected

6.2.0
affected

6.0.5 and below
affected

6.0.5 and below
affected

below 6.0.0
affected

References

fortiguard.com/psirt/FG-IR-19-209

cve.org (CVE-2019-15708)

nvd.nist.gov (CVE-2019-15708)

Download JSON