Skip to content
OpenAdvisories
High · 7.8 CVE-2021-26106 EUVD-2021-12927GHSA-7wf6-r29p-wfx8

An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 throu…

Published Jul 9, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiAP-W2, FortiAP-S, FortiAP Category: Network devices

Description

An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiAP-W2, FortiAP-S, FortiAP FortiAP-W2 6.2.4 through 6.2.5; FortiAP-S 6.2.4 through 6.2.5; FortiAP 6.4.1 through 6.4.5 —

References