Multiple Cross-Site Scripting Vulnerabilities in Fortinet FortiWLC (CNVD-2017-32268)

The Fortinet FortiWLC is a network management appliance. FortiWLC versions 6.1-2, 6.1-4, 6.1-5, FortiWLC 7.0-7, 7.0-8, 7.0-9, 7.0-10, and FortiWLC 8.0, 8.1, 8.2, 8.3.0-8.3.2 contain multiple cross-site scripting vulnerabilities in their implementations, which can be exploited by attackers to...

Fortinet FortiWLC OS Command Injection Vulnerability (CNVD-2017-32269)

The Fortinet FortiWLC is a network management appliance. FortiWLC versions 6.1-2, 6.1-4, 6.1-5, FortiWLC 7.0-7, 7.0-8, 7.0-9, 7.0-10, and FortiWLC 8.0, 8.1, 8.2, 8.3.0-8.3.2 suffer from OS command injection vulnerabilities in their implementations, which can be exploited by an attacker to inject...

FortiWLC file management OS Command Injection vulnerability

The FortiWLC file management AP script download webUI page is affected by an OS Command Injection vulnerability which may allow an authenticated admin user to execute arbitrary system console commands, and possibly subsequently "root" the device...

FortiWLC XSS injection via crafted HTTP POST request

The FortiWLC admin webUI is affected by XSS vulnerabilities, potentially exploitable by an authenticated user, via non-sanitized parameters "refresh" and "branchtotable" present in HTTP POST requests. A successful attack would involve getting a targeted victim with an open session on the WebUI t...

CVE-2017-3134

An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'...

CVE-2017-3134

An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'...

Privilege escalation

An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'...

CVE-2017-3134

An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'...

CVE-2017-3134

An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'...

CVE-2017-3134

CVE-2017-3134 affects Fortinet FortiWLC-SD versions 8.2.4 and earlier. The issue is a privilege-escalation flaw where an attacker with admin/superuser privileges can gain shell/root access via the CLI command ‘copy running-config’, attributed to lack of input sanitisation for that command. Connec...

Fortinet FortiWLC-SD Elevation of Privilege Vulnerability

Fortinet FortiWLC-SD is an unlimited router product from Fortinet. An elevation of privilege vulnerability exists in Fortinet FortiWLC-SD. An attacker can exploit this vulnerability to gain root privileges...

FortiWLC-SD Privilege escalation vulnerability using copy running-config

The lack of input sanitisation for CLI command 'copy running-config' allows a user with 'admin' or 'superuser' privilege level to gain shell on the FortiWLC-SD with root privilege...

CVE-2016-8491

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell...

Hardcoded credentials

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell...

CVE-2016-8491

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell...

CVE-2016-8491

CVE-2016-8491 affects Fortinet FortiWLC: presence of a hardcoded account named 'core' that allows attackers to gain unauthorized read/write access via a remote shell. This is evidenced across multiple sources (Fortinet advisory FG-IR-16-065 and various CVE/NVD records) describing a hardcoded core...

CVE-2016-8491

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell...

Fortinet FortiWLC Hard-Coded Security Bypass Vulnerability

Fortinet FortiWLC is a wireless controller from Fortinet. A security bypass vulnerability exists in the hardcoding of the Fortinet FortiWLC, which could be exploited by an attacker to gain access to the system and obtain sensitive information...

FortiWLC Undocumented Hardcoded core Account

FortiWLC comes with a hardcoded account named 'core' which is used by Meru Access Points to send core dumps to the FortiWLC and has read/write privileges over various parts of the system...

Fortinet FortiWLC Information Disclosure Vulnerability

Fortinet FortiWLC is a wireless controller from Fortinet. A security vulnerability exists in Fortinet FortiWLC. An attacker can exploit this vulnerability by reading the pam.log file to obtain sensitive user credentials...