MEDIUM🇬🇧 English

CVE-2024-26012

CVSS 6.7v3.1pub. 2025-01-14upd. 2025-01-31

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2 all verisons, and 6.4.0 through 6.4.9, FortiAP-W2 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.3, and 7.4.0 through 7.4.2, FortiAP 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.3, and 7.4.0 through 7.4.2 allow a local authenticated attacker to execute unauthorized code via the CLI.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Fortinet Fortiap

    APP
    Fortinet
    6.4.1 – 7.2.4 (bez)7.4.0 – 7.4.3 (bez)

  • Fortinet Fortiap S

    APP
    Fortinet
    6.2.0 – 6.4.10 (bez)

  • Fortinet Fortiap W2

    APP
    Fortinet
    6.4.0 – 7.2.4 (bez)7.4.0 – 7.4.3 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Command Injection
CWE
Referencje

Powiązane podatności

CVE-2022-29058HIGH7.8ten sam produkt

An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] in the co...

CVE-2021-26106HIGH7.8ten sam produkt

An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 ...

CVE-2019-17657HIGH7.5ten sam produkt

An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, Fort...

CVE-2025-53870MEDIUM6.7ten sam produkt

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in...

CVE-2025-53680MEDIUM6.7ten sam produkt

An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [C...