Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Vulnerability Type
文件名或路径的外部可控制
Vulnerability Title
Fortinet FortiAP-U 安全漏洞
Vulnerability Description
Fortinet FortiAP-U是美国飞塔（Fortinet）公司的一款用于管理无线接入点设备的控制器。 Fortinet FortiAP-U 存在安全漏洞，该漏洞源于允许经过身份验证的攻击者通过构造命令参数列出和删除任意文件和目录。受影响的产品和版本: FortiAP-U 7.0.0版本，6.2.0至6.2.5版本，6.0版本，5.4版本。
CVSS Information
N/A
Vulnerability Type
N/A