Riskcovery

CVE-2023-25608

State
Published
Severity
5.2 Medium
Published
Sep 13, 2023
Updated
Sep 24, 2024
Reserved
Feb 8, 2023

Read the record on cve.org

Description

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all versions; FortiAP 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions, 6.0 all versions; FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to read arbitrary files via specially crafted command arguments.

Scores

CVSSScoreVectorSource
3.15.2 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:Cfortinet

Weaknesses

Affected Products

ProductVersions
FortiAP-W2Fortinet
  • 7.2.0 through 7.2.1Affected
  • 7.0.3 through 7.0.5Affected
  • 7.0.0 through 7.0.1Affected
  • 6.4.0 through 6.4.9Affected
  • 6.2.0 through 6.2.6Affected
  • 6.0.0 through 6.0.6Affected
FortiAP-CFortinet
  • 5.4.0 through 5.4.4Affected
  • 5.2.0 through 5.2.1Affected
FortiAPFortinet
  • 7.2.0 through 7.2.1Affected
  • 7.0.0 through 7.0.5Affected
  • 6.4.3 through 6.4.9Affected
  • 6.0.0 through 6.0.6Affected
FortiAP-UFortinet
  • 7.0.0Affected
  • 6.2.0 through 6.2.5Affected
  • 6.0.0 through 6.0.4Affected
  • 5.4.3 through 5.4.6Affected
  • 5.4.0Affected
FortiAP-SFortinet
  • 6.4.0 through 6.4.9Affected
  • 6.2.0 through 6.2.6Affected
  • 6.0.0 through 6.0.6Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.