FG-IR-26-131: Command injection in CLI
An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] in FortiAP, FortiAP-U & FortiAP-W2 CLI may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-26-131?
The severity of FG-IR-26-131 is critical due to its potential for arbitrary command execution.
How do I fix FG-IR-26-131?
To fix FG-IR-26-131, update FortiAP to version 7.6.3 or newer, or FortiAP-U to version 7.0.6 or newer, and FortiAP-W2 to version 7.4.5 or newer.
What products are affected by FG-IR-26-131?
FortiAP, FortiAP-U, and FortiAP-W2 versions up to 7.6.2, 7.0.5, and 7.4.4 respectively are affected by FG-IR-26-131.
Who can exploit the FG-IR-26-131 vulnerability?
An authenticated privileged attacker can exploit the FG-IR-26-131 vulnerability to execute unauthorized commands.
What is OS command injection in FG-IR-26-131?
OS command injection in FG-IR-26-131 refers to the improper neutralization of command inputs allowing execution of arbitrary OS commands.