fortinet fortiwlc 7.0-10 vulnerabilities and exploits

(subscribe to this query)

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and previous versions, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote malicious users to read or write to arbitrary files via unspecified vectors.

Fortinet Fortiwlc 7.0-9-1 Fortinet Fortiwlc 7.0-10-0 Fortinet Fortiwlc 8.0-5-0 Fortinet Fortiwlc 8.1-2-0 Fortinet Fortiwlc Fortinet Fortiwlc 8.2-4-0

Fortinet FortiWLC 6.1-2-29 and previous versions, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file.

Fortinet Fortiwlc 8.2-4-0 Fortinet Fortiwlc Fortinet Fortiwlc 7.0-9-1 Fortinet Fortiwlc 8.0-5-0 Fortinet Fortiwlc 7.0-10-0 Fortinet Fortiwlc 8.1-2-0

A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters "refr...

Fortinet Fortiwlc 6.1-2 Fortinet Fortiwlc 6.1-4 Fortinet Fortiwlc 6.1-5 Fortinet Fortiwlc 7.0-7 Fortinet Fortiwlc 8.1 Fortinet Fortiwlc 8.2 Fortinet Fortiwlc 8.3.0 Fortinet Fortiwlc 8.3.1 Fortinet Fortiwlc 8.3.2 Fortinet Fortiwlc 7.0-8 Fortinet Fortiwlc 7.0-10 Fortinet Fortiwlc 7.0-9 Fortinet Fortiwlc 8.0

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows malicious users to gain unauthorized read/write access via a remote shell.

Fortinet Fortiwlc 8.2-4-0 Fortinet Fortiwlc 7.0-9-1 Fortinet Fortiwlc 7.0-10-0 Fortinet Fortiwlc 8.1-2-0 Fortinet Fortiwlc 8.1-3-2

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 up to and including 6.1-5, 7.0-7 up to and including 7.0-10, 8.0 up to and including 8.2, and 8.3.0 up to and including 8.3.2 file management AP script download webUI page allows an authenticated admin user to execu...

Fortinet Fortiwlc

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook