CVE-2023-25608

EUVD-2023-29549

13.09.2023, 13:15

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all versions; FortiAP 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions, 6.0 all versions; FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to read arbitrary files via specially crafted command arguments.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
fortinet	CNA	5.2 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 45%

Affected Products (NVD)

Vendor	Product	Version
fortinet	fortiap	6.0.0 ≤ 𝑥 < 7.0.6
fortinet	fortiap	7.2.0 ≤ 𝑥 < 7.2.2
fortinet	fortiap-c	5.2.0 ≤ 𝑥 < 5.4.5
fortinet	fortiap-u	5.4.0 ≤ 𝑥 < 6.2.6
fortinet	fortiap-u	7.0.0
fortinet	fortiap-w2	6.0.0 ≤ 𝑥 ≤ 7.0.1
fortinet	fortiap-w2	7.0.3 ≤ 𝑥 < 7.0.6
fortinet	fortiap-w2	7.2.0 ≤ 𝑥 < 7.2.2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-792 - Incomplete Filtering of One or More Instances of Special Elements
The software receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

References

https://fortiguard.com/psirt/FG-IR-22-120