CVE-2017-17540 The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell.
CriticalCVSS 9.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortiwlc | >= 7.0, <= 7.0.11 | No fix listed |
| fortinet fortiwlc | >= 8.0, <= 8.3.3 | No fix listed |
| fortinet fortiwlc | = 8.3.3 | No fix listed |
References
- 104119 third-party-advisory vdb-entry
- fortiguard.com vendor-advisory