fortiap-s Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fortiap-s/ Sun, 26 Feb 2023 06:31:39 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png fortiap-s Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fortiap-s/ 32 32 CVE-2019-17657 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-17657/ Sun, 26 Feb 2023 06:31:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-17657/ An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP DoS Attacks.

The post CVE-2019-17657 appeared first on CVE Vulnerability.

]]> An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP DoS Attacks.

The post CVE-2019-17657 appeared first on CVE Vulnerability.

]]> CVE-2021-26106 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26106/ Thu, 23 Feb 2023 14:08:17 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26106/ An improper neutralization of special elements used in an OS Command vulnerability in FortiAP’s console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments.

The post CVE-2021-26106 appeared first on CVE Vulnerability.

]]> An improper neutralization of special elements used in an OS Command vulnerability in FortiAP’s console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments.

The post CVE-2021-26106 appeared first on CVE Vulnerability.

]]>