CVE-2025-53870
Essential information
- Published
- 12/05/2026 18:16
- Modified
- 12/05/2026 18:57
- Author
- —
- Creator
- —
- CVSS
- 6.7 MEDIUM (v3.1)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H—
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- LOCAL
- Attack complexity
- LOW
- Privileges required
- HIGH
- User interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality impact
- HIGH
- Integrity impact
- HIGH
- Availability impact
- HIGH
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Attack requirements
- —
- Privileges required
- —
- User interaction
- —
- Confidentiality (V)
- —
- Confidentiality (S)
- —
- Integrity (V)
- —
- Integrity (S)
- —
- Availability (V)
- —
- Availability (S)
- —
- Exploit maturity
- —
Description
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all versions, FortiAP 6.4 all versions, FortiAP-W2 7.4.0 through 7.4.4, FortiAP-W2 7.2 all versions, FortiAP-W2 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted cli command.
NVD status
- Status
- Undergoing Analysis — CVE is currently being analyzed by NVD staff, this process results in association of reference link tags, CVSS scores, CWE association, and CPE applicability statements.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| fortinet / fortiap | cpe:2.3:a:fortinet:fortiap:7.6.0-7.6.2:*:*:*:*:*:*:* |
| fortinet / fortiap | cpe:2.3:a:fortinet:fortiap:7.4.0-7.4.5:*:*:*:*:*:*:* |
| fortinet / fortiap | cpe:2.3:a:fortinet:fortiap:7.2:*:*:*:*:*:*:* |
| fortinet / fortiap | cpe:2.3:a:fortinet:fortiap:7.0:*:*:*:*:*:*:* |
| fortinet / fortiap | cpe:2.3:a:fortinet:fortiap:6.4:*:*:*:*:*:*:* |
| fortinet / fortiap-w2 | cpe:2.3:a:fortinet:fortiap-w2:7.4.0-7.4.4:*:*:*:*:*:*:* |
| fortinet / fortiap-w2 | cpe:2.3:a:fortinet:fortiap-w2:7.2:*:*:*:*:*:*:* |
| fortinet / fortiap-w2 | cpe:2.3:a:fortinet:fortiap-w2:7.0:*:*:*:*:*:*:* |