Description
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiWAN | 4.5.0 – ≤ 4.5.9, 4.4.0 – ≤ 4.4.1, 4.3.0 – ≤ 4.3.1, 4.2.5 – ≤ 4.2.7, 4.2.1 – ≤ 4.2.2, 4.1.1 – ≤ 4.1.3, 4.0.0 – ≤ 4.0.6 | — |