VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 6, 2022· Updated Jun 17, 2026

CVE-2022-29058

CVE-2022-29058

Description

An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0, FortiAP-S 6.0.0 through 6.4.7, FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0 and FortiAP-U 5.4.0 through 6.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected products

10
  • Fortinet/FortiAP-S4 versions
    cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.6
    • cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.6
    • cpe:2.3:a:fortinet:fortiap:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 6.0.0-6.4.7, 7.0.0-7.0.3, 7.2.0
  • Fortinet/FortiAP-U2 versions
    cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*range: >=5.4.0,<=5.4.6
    • (no CPE)range: 5.4.0-6.2.3
  • Fortinet/FortiAP-W24 versions
    cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.6
    • cpe:2.3:a:fortinet:fortiap-w2:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 6.0.0-6.4.7, 7.0.0-7.0.3, 7.2.0
    • (no CPE)range: FortiAP-U 5.4.0 through 6.2.3; FortiAP-S 6.0.0 through 6.4.7; FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0; FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0.

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.