A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
[
{
"product": "Fortinet FortiAP-S/W2",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "6.2.1"
},
{
"status": "affected",
"version": "6.2.0"
},
{
"status": "affected",
"version": "6.0.5 and below"
}
]
},
{
"product": "Fortinet FortiAP-U",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "6.0.5 and below"
}
]
},
{
"product": "Fortinet FortiAP",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "below 6.0.0"
}
]
}
]