What is CVE-2019-15710?

CVE-2019-15710 is a high-severity vulnerability in Fortiguard Fortiextender, classified under OS Command Injection. CVSS score: 7.2/10. Published 2019-10-31.

How severe is CVE-2019-15710?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Fortiguard Fortiextender

CVE-2019-15710

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.019 (77.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortiguard Fortiextender
Fortiguard Fortiextender_firmware
Fortinet Fortiextender — versions 4.1.0 to 4.1.1, 4.0.0 and below

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-15710?: CVE-2019-15710 is a high-severity vulnerability in Fortiguard Fortiextender, classified under OS Command Injection. CVSS score: 7.2/10. Published 2019-10-31.
How severe is CVE-2019-15710?: High severity. CVSS v3 base score is 7.2 out of 10.