Unrated severityNVD Advisory· Published Mar 2, 2022· Updated Oct 25, 2024

CVE-2022-22301

Description

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0 through 5.2.1 may allow an authenticated attacker to execute unauthorized commands by running CLI commands with specifically crafted arguments.

Affected products

Fortinet/FortiAP-Cllm-create
Range: >=5.2.0 <=5.2.1, >=5.4.0 <=5.4.3
Fortinet/Fortinetcpe-rescue
Range: FortiAP-C 5.4.0 through 5.4.3, 5.2.0 through 5.2.1

Patches

Vulnerability mechanics

References

fortiguard.com/psirt/FG-IR-21-227mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000