CVE-2019-15710

2019-10-3119:26:14

fortinet

www.cve.org

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

JSON

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted “execute date” commands.

CNA Affected

[
  {
    "product": "FortiExtender",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "4.1.0 to 4.1.1"
      },
      {
        "status": "affected",
        "version": "4.0.0 and below"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-19-273