Skip to content
OpenAdvisories
High · 7.8 CVE-2022-22301 EUVD-2022-27447GHSA-rhxg-2cq5-ch36

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0…

Published Mar 2, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiAP-C Category: Network devices

Description

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0 through 5.2.1 may allow an authenticated attacker to execute unauthorized commands by running CLI commands with specifically crafted arguments.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiAP-C FortiAP-C 5.4.0 through 5.4.3, 5.2.0 through 5.2.1 —

References