Hardcoded credentials

2017-02-0117:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.8%

The presence of a hardcoded account named ‘core’ in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.

CPENameOperatorVersion
fortiwlceq8.132.0
fortiwlceq8.240.0
fortiwlceq7.91.0
fortiwlceq8.120.0
fortiwlceq7.100.0

Name	Operator	Version
fortiwlc	eq	8.132.0
fortiwlc	eq	8.240.0
fortiwlc	eq	7.91.0
fortiwlc	eq	8.120.0
fortiwlc	eq	7.100.0

References

www.securityfocus.com/bid/94186

fortiguard.com/advisory/FG-IR-16-065