Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

🗓️ 19 Dec 2024 10:31:00Reported by The Hacker NewsType

Fortinet warns of a critical FortiWLM vulnerability allowing unauthorized access to sensitive files.

Reporter	Title	Published	Views	Family All 38
ATTACKERKB	CVE-2023-48782	13 Dec 202307:15	–	attackerkb
BDU FSTEC	The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises due to the failure to take measures to eliminate special elements used in the operating system’s command set. This vulnerability allows attackers to execute arbitrary commands.	15 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the imagename handler in the CGI script /ems/cgi-bin/ezrf-lighttpd.cgi of the graphical interface for managing WLAN access points and LAN switches in Fortinet FortiWLM allows a attacker to execute arbitrary code.	20 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Fortinet FortiManager software, a centralized device management tool, arises from the lack of measures to neutralize specific elements, allowing a perpetrator to execute arbitrary code.	23 Dec 202400:00	–	bdu_fstec
Circl	CVE-2023-34990	18 Dec 202412:48	–	circl
Circl	CVE-2023-48782	19 Dec 202414:06	–	circl
Circl	CVE-2024-48889	18 Dec 202412:48	–	circl
CNNVD	Fortinet FortiWLM Operating System Command Injection Vulnerability	13 Dec 202300:00	–	cnnvd
CNNVD	Fortinet FortiWLM 代码注入漏洞	18 Dec 202400:00	–	cnnvd
CNNVD	Fortinet FortiManager 操作系统命令注入漏洞	18 Dec 202400:00	–	cnnvd