CVE-2021-42759

MEDIUM

Fortinet Meru AP <= 8.5.5 - OS Command Injection via CLI Commands

Title source: llm

Description

A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://fortiguard.com/advisory/FG-IR-21-004

Scores

CVSS v3 6.7

EPSS 0.0011

EPSS Percentile 29.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-78

Status published

Products (1)

fortinet/meru_firmware 8.5.0 - 8.5.5

Published Dec 09, 2021

Tracked Since Feb 18, 2026