Vulnerability Details CVE-2021-26106
An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.8%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
References
Products affected by CVE-2021-26106
-
cpe:2.3:a:fortinet:fortiap-s:6.2.4
-
cpe:2.3:a:fortinet:fortiap-s:6.2.5
-
cpe:2.3:a:fortinet:fortiap-w2:6.2.4
-
cpe:2.3:a:fortinet:fortiap-w2:6.2.5
-
cpe:2.3:a:fortinet:fortiap:6.4.1
-
cpe:2.3:a:fortinet:fortiap:6.4.2
-
cpe:2.3:a:fortinet:fortiap:6.4.3
-
cpe:2.3:a:fortinet:fortiap:6.4.4
-
cpe:2.3:a:fortinet:fortiap:6.4.5