Description
An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiWAN | 4.5.0 – ≤ 4.5.7, 4.4.0 – ≤ 4.4.1, 4.3.0 – ≤ 4.3.1, 4.2.5 – ≤ 4.2.7, 4.2.1 – ≤ 4.2.2, 4.1.1 – ≤ 4.1.3, 4.0.0 – ≤ 4.0.6 | — |