Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all versions; FortiAP 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions, 6.0 all versions; FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to read arbitrary files via specially crafted command arguments.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
对一个或多个特殊元素实例的过滤不完全
Vulnerability Title
Fortinet FortiAP-W2 安全漏洞
Vulnerability Description
Fortinet FortiAP-W2是美国飞塔（Fortinet）公司的一款用于管理无线接入点设备的控制器。 Fortinet FortiAP-W2存在安全漏洞，该漏洞源于允许经过身份验证的攻击者通过命令行解释器特制命令参数来读取任意文件。受影响的产品和版本：FortiAP-W2 7.2.0至7.2.1版本，7.0.3至7.0.5版本，7.0.0至7.0.1版本，6.4所有版本，6.2所有版本，6.0所有版本，5.4.0至5.4.4版本，5.2所有版本；FortiAP 7.2.0至7.2.1版本，7.0
CVSS Information
N/A
Vulnerability Type
N/A