CVE-2023-36634

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://fortiguard.com/psirt/FG-IR-23-123	Vendor Advisory
https://fortiguard.com/psirt/FG-IR-23-123	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:fortiap-u::::::::
	cpe:2.3:a:fortinet:fortiap-u::::::::
	cpe:2.3:a:fortinet:fortiap-u::::::::
	cpe:2.3:a:fortinet:fortiap-u:7.0.0:::::::*

History

21 Nov 2024, 08:10

Type	Values Removed	Values Added
References	~~() https://fortiguard.com/psirt/FG-IR-23-123 - Vendor Advisory~~	() https://fortiguard.com/psirt/FG-IR-23-123 - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~8.8~~	v2 : unknown v3 : 7.1

15 Sep 2023, 13:46

Type	Values Removed	Values Added
References	~~(MISC) https://fortiguard.com/psirt/FG-IR-23-123 -~~	(MISC) https://fortiguard.com/psirt/FG-IR-23-123 - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
CPE		cpe:2.3:a:fortinet:fortiap-u:::::::: cpe:2.3:a:fortinet:fortiap-u:7.0.0:::::::*
CWE		NVD-CWE-Other
First Time		Fortinet Fortinet fortiap-u

13 Sep 2023, 13:57

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-09-13 13:15

Updated : 2024-11-21 08:10

NVD link : CVE-2023-36634

Mitre link : CVE-2023-36634

CVE.ORG link : CVE-2023-36634

JSON object : View

Products Affected

fortinet

fortiap-u

CWE

CWE-73

External Control of File Name or Path

NVD-CWE-Other

{"id": "CVE-2023-36634", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2023-09-13T13:15:08.883", "references": [{"url": "https://fortiguard.com/psirt/FG-IR-23-123", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}, {"url": "https://fortiguard.com/psirt/FG-IR-23-123", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-73"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments."}, {"lang": "es", "value": "Un filtrado incompleto de una o m\u00e1s instancias de vulnerabilidad de elementos especiales [CWE-792] en el int\u00e9rprete de l\u00ednea de comando de FortiAP-U 7.0.0, 6.2.0 a 6.2.5, 6.0 todas las versiones, 5.4 todas las versiones puede permitir un atacante autenticado para enumerar y eliminar archivos y directorios arbitrarios mediante argumentos de comandos especialmente manipulados."}], "lastModified": "2024-11-21T08:10:08.287", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BEF86D0-7255-4054-8AA7-4AA411C5FE32", "versionEndIncluding": "5.4.6", "versionStartIncluding": "5.4.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "607B4B16-A019-4DB5-A3D5-845B3C81E2CA", "versionEndIncluding": "6.0.4", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D94D840D-28B9-45AB-952C-951710AA63CD", "versionEndIncluding": "6.2.5", "versionStartIncluding": "6.2.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiap-u:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "743763F2-D4DE-4E9D-B112-7CA27C61A423"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}