Lucene search
China National Vulnerability DatabaseCNVD-2022-18538HistoryMar 02, 2022 - 12:00 a.m.
Fortinet FortiWLM Command Injection Vulnerability
2022-03-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
0.001 Low
EPSS
Percentile
48.5%
A command injection vulnerability exists in Fortinet FortiWLC, a wireless LAN controller from Fortinet, which stems from a failure to properly validate input data in the alert dashboard and controller configuration handler. HTTP requests and execute arbitrary operating system commands on the target system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Fortinet FortiWLM | le | 8.3.2 | |
| Fortinet FortiWLM >=8.4.0， | le | 8.4.2 | |
| Fortinet FortiWLM >=8.5.0， | le | 8.5.2 | |
| Fortinet FortiWLM >=8.6.0， | lt | 8.6.3 |
Related
cve
cve
CVE-2021-43075
2022-03-01 19:15:08
fortinet
fortinet
FortiWLM - command Injection in script handlers
2022-03-01 00:00:00
nvd
nvd
CVE-2021-43075
2022-03-01 19:15:08
prion
prion
Command injection
2022-03-01 19:15:00
cvelist
cvelist
CVE-2021-43075
2022-03-01 18:25:11