CVE-2019-15708: OS Command Injection
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15708?
CVE-2019-15708 is a system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below, and FortiAP-U below 6.0.0 that allows unauthorized administrators to run arbitrary system level commands.
How does CVE-2019-15708 affect Fortinet Fortiap products?
CVE-2019-15708 affects Fortinet Fortiap products including FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below, and FortiAP-U below 6.0.0.
What is the severity of CVE-2019-15708?
CVE-2019-15708 has a severity level of 6.7 (high).
How can unauthorized administrators exploit CVE-2019-15708?
Unauthorized administrators can exploit CVE-2019-15708 by using specially crafted ifconfig commands to run arbitrary system level commands.
Is there a fix available for CVE-2019-15708?
Yes, Fortinet has provided a fix for CVE-2019-15708. It is recommended to update to the latest version of the affected Fortiap products.