ID

VAR-201805-0224

CVE

CVE-2017-17539

TITLE

Fortinet FortiWLC Vulnerabilities related to the use of hard-coded credentials

DESCRIPTION

The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/write access via a remote shell. Fortinet FortiWLC Contains a vulnerability in the use of hard-coded credentials.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. FortiWLC is a wireless controller from Fortinet. There is a hard-coded account vulnerability in FortinetFortiWLC versions 7.0.11 and earlier. Fortinet FortiWLC is prone to multiple information-disclosure vulnerabilities. Information obtained may aid in further attacks

IOT TAXONOMY

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

remote

TYPE

lack of information

CONFIGURATIONS

[
  {
    "CVE_data_version": "4.0",
    "nodes": [
      {
        "operator": "OR",
        "cpe_match": [
          {
            "vulnerable": true,
            "cpe22Uri": "cpe:/a:fortinet:fortiwlc"
          }
        ]
      }
    ]
  }
]

PATCH

EXTERNAL IDS

REFERENCES

CREDITS

University of Toronto

SOURCES

LAST UPDATE DATE

2024-11-23T22:41:51.557000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE