FO
Product
FortiWLC
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 7Low 0
Watch
Add FortiWLC to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-17540 | 9.8 | May 8 | The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell Affected: 7.0 through 7.0.11; 8.0 through 8.3.3 |
| CVE-2017-17539 | 9.8 | May 8 | The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/write access via a remote shell Affected: 7.0 through 7.0.11; 8.0 through 8.3.3 |
| CVE-2016-7560 | 9.8 | Oct 5 | The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read… Affected: through 6.1-2-29; 7.0-9-1; 7.0-10-0; 8.0-5-0; 8.1-2-0; 8.2-4-0 |
| CVE-2016-8491 | 9.1 | Feb 1 | The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell Affected: 7.0-9-1; 7.0-10-0; 8.1-2-0; 8.1-3-2; 8.2-4-0 |
| CVE-2021-42758 | 8.8 | Dec 8 | An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an… Affected: 8.2.4 through 8.2.7; 8.3.0 through 8.3.3; 8.5.0 through 8.5.5; 8.0.5; 8.0.6; 8.1.2; +11 more |
| CVE-2017-7341 | 7.2 | Oct 26 | An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download… Affected: 6.1-2 through 6.1-5; 7.0-7 through 7.0-10; 8.0 through 8.2; 8.3.0 through 8.3.2 |
| CVE-2016-7561 | 7.2 | Oct 5 | Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file Affected: through 6.1-2-29; 7.0-9-1; 7.0-10-0; 8.0-5-0; 8.1-2-0; 8.2-4-0 |
| CVE-2021-22126 | 6.7 | Mar 17 | A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local,… Affected: 8.4.0 before 8.5.3; 8.2.6; 8.2.7; 8.3.2; 8.3.3 |
| CVE-2021-26093 | 6.5 | Dec 19 | An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access… Affected: 8.6.0; 8.5.0 through 8.5.3; 8.4.4 through 8.4.8; 8.4.0 through 8.4.2; 8.3.0 through 8.3.3; 8.2.4 through 8.2.7; +2 more |
| CVE-2021-26087 | 6.1 | Mar 17 | An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web interface may allow… Affected: 8.4.0 through 8.4.2; 8.4.4 before 8.5.4; 8.3.3; 8.6.0 |
| CVE-2022-23439 | 6.1 | Jan 22 | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host`… Affected: 8.6.0 before 8.6.7 |
| CVE-2020-9288 | 5.4 | Jun 22 | An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS… Affected: through 8.5.1 |
| CVE-2017-7335 | 5.4 | Oct 26 | A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows… Affected: 6.1-2; 6.1-4; 6.1-5; 7.0-7; 7.0-8; 7.0-9; +7 more |
| CVE-2021-32584 | 5.3 | Mar 17 | An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4,… Affected: 8.1.3 before 8.5.4; 8.6.0 |
Showing 14