Skip to content
fr Sign in
5.2 Medium

CVE-2023-25608 An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line…

Description

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all versions; FortiAP 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions, 6.0 all versions; FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to read arbitrary files via specially crafted command arguments.

Affected products and versions

Product Affected versions Fixed in
FortiAP-W2 7.2 7.2.0 → 7.2.1 No fix stated
FortiAP-W2 7.0 7.0.0 → 7.0.5 No fix stated
FortiAP-W2 6.4 6.4.0 → 6.4.9 No fix stated
FortiAP-W2 6.2 6.2.0 → 6.2.6 No fix stated
FortiAP-W2 6.0 6.0.0 → 6.0.6 No fix stated
FortiAP-C 5.4 5.4.0 → 5.4.4 No fix stated
FortiAP-C 5.2 5.2.0 → 5.2.1 No fix stated
FortiAP 7.2 7.2.0 → 7.2.1 No fix stated
FortiAP 7.0 7.0.0 → 7.0.5 No fix stated
Show the 9 other branches
Product Affected versions Fixed in
FortiAP 6.4 6.4.3 → 6.4.9 No fix stated
FortiAP 6.0 6.0.0 → 6.0.6 No fix stated
FortiAP-U 7.0.0 No fix stated
FortiAP-U 6.2 6.2.0 → 6.2.5 No fix stated
FortiAP-U 6.0 6.0.0 → 6.0.4 No fix stated
FortiAP-U 5.4 5.4.0 → 5.4.6 No fix stated
FortiAP-S 6.4 6.4.0 → 6.4.9 No fix stated
FortiAP-S 6.2 6.2.0 → 6.2.6 No fix stated
FortiAP-S 6.0 6.0.0 → 6.0.6 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiAP-W2

The 4 CVEs of FortiAP-W2 →
CVE-2025-53870 An improper neutralization of special elements used in an os command ('os command injection') vulnerability in… 6.5 Medium CVE-2025-53680 An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78]… 6.1 Medium CVE-2024-26012 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2… 6.3 Medium
Track this CVE