How does CVE-2019-15708 affect Fortinet Fortiap products?

CVE-2019-15708 affects Fortinet Fortiap products including FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below, and FortiAP-U below 6.0.0.

What is the severity of CVE-2019-15708?

CVE-2019-15708 has a severity level of 6.7 (high).

How can unauthorized administrators exploit CVE-2019-15708?

Unauthorized administrators can exploit CVE-2019-15708 by using specially crafted ifconfig commands to run arbitrary system level commands.

Is there a fix available for CVE-2019-15708?

Yes, Fortinet has provided a fix for CVE-2019-15708. It is recommended to update to the latest version of the affected Fortiap products.

Vulnerability/
CVE-2019-15708

high

7.2

CWE

78 77

15/3/2020

25/10/2024

CVE-2019-15708: OS Command Injection

Q: What is CVE-2019-15708?

CVE-2019-15708 is a system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below, and FortiAP-U below 6.0.0 that allows unauthorized administrators to run arbitrary system level commands.

First published: Sun Mar 15 2020(Updated: )

A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.

Credit: psirt@fortinet.com

Affected Software	Affected Version	How to fix
Fortinet FortiAP	<=6.0.5
Fortinet FortiAP	<=6.0.5
Fortinet FortiAP	=6.2.0
Fortinet FortiAP	=6.2.1
Fortinet FortiAP	<=6.0.0
Fortinet FortiAP	<=6.0.5
Fortinet FortiAP	=6.2.0
Fortinet FortiAP	=6.2.1

Never miss a vulnerability like this again

Reference Links

https://fortiguard.com/psirt/FG-IR-19-209

Frequently Asked Questions

What is CVE-2019-15708?
CVE-2019-15708 is a system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below, and FortiAP-U below 6.0.0 that allows unauthorized administrators to run arbitrary system level commands.
How does CVE-2019-15708 affect Fortinet Fortiap products?
CVE-2019-15708 affects Fortinet Fortiap products including FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below, and FortiAP-U below 6.0.0.
What is the severity of CVE-2019-15708?
CVE-2019-15708 has a severity level of 6.7 (high).
How can unauthorized administrators exploit CVE-2019-15708?
Unauthorized administrators can exploit CVE-2019-15708 by using specially crafted ifconfig commands to run arbitrary system level commands.
Is there a fix available for CVE-2019-15708?
Yes, Fortinet has provided a fix for CVE-2019-15708. It is recommended to update to the latest version of the affected Fortiap products.

agent/weakness
agent/type
agent/references
agent/severity
agent/author
agent/first-publish-date
agent/event
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/softwarecombine
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/fortinet
canonical/fortinet fortiap
version/fortinet fortiap/6.0.5
version/fortinet fortiap/6.2.0
version/fortinet fortiap/6.2.1
version/fortinet fortiap/6.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.