CVE-2016-7560 The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary...
CriticalCVSS 9.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortiwlc | <= 6.1-2-29 | No fix listed |
| fortinet fortiwlc | = 7.0-9-1 | No fix listed |
| fortinet fortiwlc | = 7.0-10-0 | No fix listed |
| fortinet fortiwlc | = 8.0-5-0 | No fix listed |
| fortinet fortiwlc | = 8.1-2-0 | No fix listed |
| fortinet fortiwlc | = 8.2-4-0 | No fix listed |
References
- fortiguard.com vendor-advisory
- 93286 third-party-advisory vdb-entry