NA

CVE-2023-25608

Published: 13/09/2023 Updated: 07/11/2023
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 up to and including 7.2.1, 7.0.3 up to and including 7.0.5, 7.0.0 up to and including 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 up to and including 5.4.4, 5.2 all versions; FortiAP 7.2.0 up to and including 7.2.1, 7.0.0 up to and including 7.0.5, 6.4 all versions, 6.0 all versions; FortiAP-U 7.0.0, 6.2.0 up to and including 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated malicious user to read arbitrary files via specially crafted command arguments.

Vulnerable Product Search on Vulmon Subscribe to Product

fortinet fortiap-u 7.0.0

fortinet fortiap-u

fortinet fortiap

fortinet fortiap-c

fortinet fortiap-w2