CVE-2019-15710: Command Injection
Published Oct 31, 2019
·Updated
An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.
Affected Software
2 affected components
FortiGuard Fortiextender Firmware<=4.1.1
FortiGuard Fortiextender
Event History
Oct 31, 2019
CVE Published
via MITRE·07:26 PM
Data Sourced
via MITRE·07:26 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-15710?
CVE-2019-15710 is classified as a high severity vulnerability due to its potential for unauthorized command execution.
2
How do I fix CVE-2019-15710?
To fix CVE-2019-15710, upgrade FortiExtender firmware to version 4.1.2 or later.
3
What type of vulnerability is CVE-2019-15710?
CVE-2019-15710 is an OS command injection vulnerability that affects CLI admin console operations.
4
Which versions of FortiExtender are affected by CVE-2019-15710?
CVE-2019-15710 affects FortiExtender versions 4.1.0 to 4.1.1 and 4.0.0 and below.
5
Can unauthorized users exploit CVE-2019-15710?
Yes, unauthorized administrators can exploit CVE-2019-15710 to execute arbitrary system-level commands.