FortiAP's - Arbitrary file read through the CLI Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-22-120 Final 1 1 2023-09-13T00:00:00 Current version 2023-09-13T00:00:00 2023-09-13T00:00:00 An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP, FortiAP-W2, FortiAP-U, FortiAP-C may allow an authenticated attacker to read arbitrary files via specially crafted command arguments. None Information disclosure Internally discovered and reported by Wilfried Djettchou of Fortinet Product Security team. FortiAP 7.2.1 FortiAP 7.2.0 FortiAP 7.0.5 FortiAP 7.0.4 FortiAP 7.0.3 FortiAP 7.0.2 FortiAP 7.0.1 FortiAP 7.0.0 FortiAP 6.4.9 FortiAP 6.4.8 FortiAP 6.4.7 FortiAP 6.4.6 FortiAP 6.4.5 FortiAP 6.4.4 FortiAP 6.4.3 FortiAP 6.0.6 FortiAP 6.0.5 FortiAP 6.0.4 FortiAP 6.0.3 FortiAP 6.0.2 FortiAP 6.0.1 FortiAP 6.0.0 FortiAP-C 5.4.4 FortiAP-C 5.4.3 FortiAP-C 5.4.2 FortiAP-C 5.4.1 FortiAP-C 5.4.0 FortiAP-C 5.2.1 FortiAP-C 5.2.0 FortiAP-U 7.0.0 FortiAP-U 6.2.5 FortiAP-U 6.2.4 FortiAP-U 6.2.3 FortiAP-U 6.2.2 FortiAP-U 6.2.1 FortiAP-U 6.2.0 FortiAP-U 6.0.4 FortiAP-U 6.0.3 FortiAP-U 6.0.2 FortiAP-U 6.0.1 FortiAP-U 6.0.0 FortiAP-U 5.4.6 FortiAP-U 5.4.5 FortiAP-U 5.4.4 FortiAP-U 5.4.3 FortiAP-U 5.4.0 FortiAP-W2 7.2.1 FortiAP-W2 7.2.0 FortiAP-W2 7.0.5 FortiAP-W2 7.0.4 FortiAP-W2 7.0.3 FortiAP-W2 7.0.1 FortiAP-W2 7.0.0 FortiAP-W2 6.4.10 FortiAP-W2 6.4.9 FortiAP-W2 6.4.8 FortiAP-W2 6.4.7 FortiAP-W2 6.4.6 FortiAP-W2 6.4.5 FortiAP-W2 6.4.4 FortiAP-W2 6.4.3 FortiAP-W2 6.4.2 FortiAP-W2 6.4.1 FortiAP-W2 6.4.0 FortiAP-W2 6.2.6 FortiAP-W2 6.2.5 FortiAP-W2 6.2.4 FortiAP-W2 6.2.3 FortiAP-W2 6.2.2 FortiAP-W2 6.2.1 FortiAP-W2 6.2.0 FortiAP-W2 6.0.6 FortiAP-W2 6.0.5 FortiAP-W2 6.0.4 FortiAP-W2 6.0.3 FortiAP-W2 6.0.2 FortiAP-W2 6.0.1 FortiAP-W2 6.0.0 CVE-2023-25608 FortiAP-7.2.1 FortiAP-7.2.0 FortiAP-7.0.5 FortiAP-7.0.4 FortiAP-7.0.3 FortiAP-7.0.2 FortiAP-7.0.1 FortiAP-7.0.0 FortiAP-6.4.9 FortiAP-6.4.8 FortiAP-6.4.7 FortiAP-6.4.6 FortiAP-6.4.5 FortiAP-6.4.4 FortiAP-6.4.3 FortiAP-6.0.6 FortiAP-6.0.5 FortiAP-6.0.4 FortiAP-6.0.3 FortiAP-6.0.2 FortiAP-6.0.1 FortiAP-6.0.0 FortiAP-C-5.4.4 FortiAP-C-5.4.3 FortiAP-C-5.4.2 FortiAP-C-5.4.1 FortiAP-C-5.4.0 FortiAP-C-5.2.1 FortiAP-C-5.2.0 FortiAP-U-7.0.0 FortiAP-U-6.2.5 FortiAP-U-6.2.4 FortiAP-U-6.2.3 FortiAP-U-6.2.2 FortiAP-U-6.2.1 FortiAP-U-6.2.0 FortiAP-U-6.0.4 FortiAP-U-6.0.3 FortiAP-U-6.0.2 FortiAP-U-6.0.1 FortiAP-U-6.0.0 FortiAP-U-5.4.6 FortiAP-U-5.4.5 FortiAP-U-5.4.4 FortiAP-U-5.4.3 FortiAP-U-5.4.0 FortiAP-W2-7.2.1 FortiAP-W2-7.2.0 FortiAP-W2-7.0.5 FortiAP-W2-7.0.4 FortiAP-W2-7.0.3 FortiAP-W2-7.0.1 FortiAP-W2-7.0.0 FortiAP-W2-6.4.10 FortiAP-W2-6.4.9 FortiAP-W2-6.4.8 FortiAP-W2-6.4.7 FortiAP-W2-6.4.6 FortiAP-W2-6.4.5 FortiAP-W2-6.4.4 FortiAP-W2-6.4.3 FortiAP-W2-6.4.2 FortiAP-W2-6.4.1 FortiAP-W2-6.4.0 FortiAP-W2-6.2.6 FortiAP-W2-6.2.5 FortiAP-W2-6.2.4 FortiAP-W2-6.2.3 FortiAP-W2-6.2.2 FortiAP-W2-6.2.1 FortiAP-W2-6.2.0 FortiAP-W2-6.0.6 FortiAP-W2-6.0.5 FortiAP-W2-6.0.4 FortiAP-W2-6.0.3 FortiAP-W2-6.0.2 FortiAP-W2-6.0.1 FortiAP-W2-6.0.0 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-22-120 FortiAP's - Arbitrary file read through the CLI Reference>