Skip to content
OpenAdvisories
Unscored CVE-2016-8491 EUVD-2016-9339GHSA-pxp7-p7xv-7463

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote …

Published Feb 1, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiWLC Category: Network devices

Description

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiWLC 7.0-9-1, 7.0-10-0, 8.1-2-0, 8.1-3-2, 8.2-4-0 —

References