CVE-2019-15708: Fortinet Fortiap

Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days.

A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.

Affected products

• Fortinet Fortiap: up to and including 6.0.5
• Fortinet Fortiap-S: up to and including 6.0.5; version 6.2.0 only; version 6.2.1 only
• Fortinet Fortiap-U: up to and including 6.0.0
• Fortinet Fortiap-w2: up to and including 6.0.5; version 6.2.0 only; version 6.2.1 only

Published 2020-03-15. Last modified 2026-06-17.