Description
Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosis_control.php.
Unscored
CVE-2016-4965
EUVD-2016-5939GHSA-5qjv-3cv4-jfx6
Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute…
Published Sep 21, 2016 · Updated Aug 6, 2024 · Assigned by mitre