Cyber Resilience

CVE-2023-25608

Fortinet Fortiap-W2 6.0.0 – 7.0.1

Published
13 September 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0050 40th percentile
Risk Priority 43 floored blend · peak EPSS

Summary

CVE-2023-25608 is a medium-severity Incomplete Filtering of One or More Instances of Special Elements (CWE-792) vulnerability in Fortinet Fortiap-W2. Its CVSS base score is 5.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Content Injection (T1659); ranked at the 40th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0…

more

through 5.4.4, 5.2 all versions; FortiAP 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions, 6.0 all versions; FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to read arbitrary files via specially crafted command arguments.

CWE(s)
CWE-792NVD-CWE-Other

Related Threats

MITRE ATT&CK Enterprise Techniques

T1659 Content Injection Initial Access
Adversaries may gain access and continuously communicate with victims by injecting malicious content into systems through online network traffic.
attack.mitre.org →
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1059 Command and Scripting Interpreter Execution
Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries.
attack.mitre.org →
T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2025-53680Same product: Fortinet Fortiap
CVE-2025-53870Same product: Fortinet Fortiap
CVE-2024-26012Same product: Fortinet Fortiap
CVE-2023-36634Same product: Fortinet Fortiap-U
CVE-2025-54972Same vendor: Fortinet
CVE-2024-55594Same vendor: Fortinet
CVE-2023-42784Same vendor: Fortinet
CVE-2023-33299Same vendor: Fortinet
CVE-2024-45324Same vendor: Fortinet
CVE-2026-39811Same vendor: Fortinet

Affected Assets

fortinet
fortiap
6.0.0 — 7.0.6 · 7.2.0 — 7.2.2
fortinet
fortiap-c
5.2.0 — 5.4.5
fortinet
fortiap-u
7.0.0 · 5.4.0 — 6.2.6
fortinet
fortiap-w2
6.0.0 — 7.0.1 · 7.0.3 — 7.0.6 · 7.2.0 — 7.2.2

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly require complete input filtering and validation to prevent this class of weakness.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.29 Security testing in development and acceptance mostly match
finds

Security testing in development and acceptance can detect incomplete filtering but does not itself implement the fix.

A.8.25 Secure development life cycle partial match
prevents

Secure development lifecycle mandates input validation and sanitization that directly prevents incomplete filtering of special elements.

A.8.26 Application security requirements partial match
prevents

Application security requirements explicitly call for input validation rules that mitigate incomplete special-element filtering.

A.8.27 Secure system architecture and engineering principles partial match
prevents

Secure architecture principles encourage defensive input handling but do not prescribe the specific filtering mechanism.

A.8.28 Secure coding partial match
prevents

Secure coding standards require complete sanitization of special elements before downstream processing.

A.8.12 Data leakage prevention none match
none

Data leakage prevention may catch some downstream effects of unfiltered data but does not address the root filtering weakness.

References