fortiap-u Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fortiap-u/ Sun, 26 Feb 2023 06:31:02 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png fortiap-u Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fortiap-u/ 32 32 CVE-2019-15708 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15708/ Sun, 26 Feb 2023 06:31:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15708/ A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.

The post CVE-2019-15708 appeared first on CVE Vulnerability.

]]> A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.

The post CVE-2019-15708 appeared first on CVE Vulnerability.

]]> CVE-2019-15709 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15709/ Sun, 26 Feb 2023 06:31:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15709/ An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI.

The post CVE-2019-15709 appeared first on CVE Vulnerability.

]]> An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI.

The post CVE-2019-15709 appeared first on CVE Vulnerability.

]]> CVE-2022-30301 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-30301/ Thu, 23 Feb 2023 05:18:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-30301/ A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 may allow an admin user to delete and access unauthorized files and data via specifically crafted CLI commands.

The post CVE-2022-30301 appeared first on CVE Vulnerability.

]]> A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 may allow an admin user to delete and access unauthorized files and data via specifically crafted CLI commands.

The post CVE-2022-30301 appeared first on CVE Vulnerability.

]]> CVE-2022-29058 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-29058/ Thu, 23 Feb 2023 05:18:22 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-29058/ An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0, FortiAP-S 6.0.0 through 6.4.7, FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0 and FortiAP-U 5.4.0 through 6.2.3 may allow an authenticated attacker to execute unauthorized commands via […]

The post CVE-2022-29058 appeared first on CVE Vulnerability.

]]> An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0, FortiAP-S 6.0.0 through 6.4.7, FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0 and FortiAP-U 5.4.0 through 6.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

The post CVE-2022-29058 appeared first on CVE Vulnerability.

]]>