CVE-2023-36634

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://fortiguard.com/psirt/FG-IR-23-123	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:fortiap-u::::::::
	cpe:2.3:a:fortinet:fortiap-u::::::::
	cpe:2.3:a:fortinet:fortiap-u::::::::
	cpe:2.3:a:fortinet:fortiap-u:7.0.0:::::::*

History

15 Sep 2023, 13:46

Type	Values Removed	Values Added
References	~~(MISC) https://fortiguard.com/psirt/FG-IR-23-123 -~~	(MISC) https://fortiguard.com/psirt/FG-IR-23-123 - Vendor Advisory
CWE		NVD-CWE-Other
First Time		Fortinet Fortinet fortiap-u
CPE		cpe:2.3:a:fortinet:fortiap-u:7.0.0:::::::* cpe:2.3:a:fortinet:fortiap-u::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8

13 Sep 2023, 13:57

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-09-13 13:15

Updated : 2023-12-10 15:14

NVD link : CVE-2023-36634

Mitre link : CVE-2023-36634

CVE.ORG link : CVE-2023-36634

JSON object : View

Products Affected

fortinet

fortiap-u

CWE

NVD-CWE-Other CWE-73

External Control of File Name or Path

{"id": "CVE-2023-36634", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "published": "2023-09-13T13:15:08.883", "references": [{"url": "https://fortiguard.com/psirt/FG-IR-23-123", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-73"}]}], "descriptions": [{"lang": "en", "value": "An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments."}, {"lang": "es", "value": "Un filtrado incompleto de una o m\u00e1s instancias de vulnerabilidad de elementos especiales [CWE-792] en el int\u00e9rprete de l\u00ednea de comando de FortiAP-U 7.0.0, 6.2.0 a 6.2.5, 6.0 todas las versiones, 5.4 todas las versiones puede permitir un atacante autenticado para enumerar y eliminar archivos y directorios arbitrarios mediante argumentos de comandos especialmente manipulados."}], "lastModified": "2023-11-07T04:16:39.237", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BEF86D0-7255-4054-8AA7-4AA411C5FE32", "versionEndIncluding": "5.4.6", "versionStartIncluding": "5.4.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "607B4B16-A019-4DB5-A3D5-845B3C81E2CA", "versionEndIncluding": "6.0.4", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D94D840D-28B9-45AB-952C-951710AA63CD", "versionEndIncluding": "6.2.5", "versionStartIncluding": "6.2.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiap-u:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "743763F2-D4DE-4E9D-B112-7CA27C61A423"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}