description: A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
problem types: Execute unauthorized code or commands
affected:
{
product: Fortinet FortiAP-S/W2
vendor: Fortinet
versions:
status: affected, version: 6.2.1
status: affected, version: 6.2.0
status: affected, version: 6.0.5 and below
}
{
product: Fortinet FortiAP-U
vendor: Fortinet
versions:
status: affected, version: 6.0.5 and below
}
{
product: Fortinet FortiAP
vendor: Fortinet
versions:
status: affected, version: below 6.0.0
}
