FortiGuard FortiAuthenticator prior to 3.0 allows remote administrators to gain privileges via the command line interface.
fortinet fortiauthenticator