CVE-2024-26012

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAP-S versions 6.2 through 6.4.9 Fortinet FortiAP-S versions 7.0 through 7.4.2 Fortinet FortiAP-W2 versions 6.4 through 7.4.2 Fortinet FortiAP versions 6.4 through 7.4.2

Description: The issue is related to an improper neutralization of special elements used in an os command, also known as 'os command injection'. This allows a local authenticated attacker to execute unauthorized code via the CLI.

Recommendations: For Fortinet FortiAP-S versions 6.2 through 6.4.9, update to a version that contains a fix for this issue. For Fortinet FortiAP-S versions 7.0 through 7.4.2, update to a version that contains a fix for this issue. For Fortinet FortiAP-W2 versions 6.4 through 7.4.2, update to a version that contains a fix for this issue. For Fortinet FortiAP versions 6.4 through 7.4.2, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the CLI to minimize the risk of exploitation.