CVE-2023-36634

State: Published
Severity: 6.5 Medium
Published: Sep 13, 2023
Updated: Sep 24, 2024
Reserved: Jun 25, 2023

Description

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:X/RC:R	fortinet

Weaknesses

CWE-73 Improper access control

Affected Products

Product	Versions
FortiAP-UFortinet	7.0.0Affected 6.2.0 through 6.2.5Affected 6.0.0 through 6.0.4Affected 5.4.3 through 5.4.6Affected 5.4.0Affected

References

https://fortiguard.com/psirt/FG-IR-23-123

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.