CVE-2017-7336

2017-07-2221:00:00

fortinet

www.cve.org

cve-2017-7336

fortinet fortiwlm

hard-coded account

remote attacker

privilege escalation

AI Score

9.6

Confidence

High

EPSS

0.004

Percentile

72.9%

JSON

A hard-coded account named ‘upgrade’ in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with ‘upgrade’ account privileges.

CNA Affected

[
  {
    "product": "Fortinet FortiWLM",
    "vendor": "Fortinet, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "8.3.0 and lower"
      }
    ]
  }
]