Improper input validation in Fortinet Fortiap-S
CVE-2019-15709
An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H.
EPSS exploit prediction
EPSS: 0.013 (70.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 71st percentile — 70.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Fortinet Fortiap-S
- Fortinet Fortiap-U
- Fortinet Fortiap-W2
- Fortinet Fortiap-S/w2, Fortiap-U — versions FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below
Weakness classification (CWE)
References
- fortiguard.com/psirt/FG-IR-19-298 (Vendor Advisory)
Frequently asked questions
- What is CVE-2019-15709?
- CVE-2019-15709 is a medium-severity vulnerability in Fortinet Fortiap-S, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2020-06-01.
- How severe is CVE-2019-15709?
- Medium severity. CVSS v3 base score is 6.5 out of 10.