CVE-2023-36634 | BDVDB-2026-211862 Detail
FortinetFortiAP-U
Description#
An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-73 Improper access control
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.