CVE-2016-8491

2017-02-0117:00:00

fortinet

www.cve.org

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

The presence of a hardcoded account named ‘core’ in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.

CNA Affected

[
  {
    "product": "Fortinet FortiWLC",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "7.0-9-1"
      },
      {
        "status": "affected",
        "version": "7.0-10-0"
      },
      {
        "status": "affected",
        "version": "8.1-2-0"
      },
      {
        "status": "affected",
        "version": "8.1-3-2"
      },
      {
        "status": "affected",
        "version": "8.2-4-0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94186

fortiguard.com/advisory/FG-IR-16-065