CRITICAL 9.8
CVE-2017-7336
EN A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges.
CVSS v3
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.9%
percentile 76.4%
Apps suivies affectées
Configurations CPE vulnérables
| Vendor | Produit | Plateforme | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| fortinet | fortiwlm | iOS | ≤8.3.0 | cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:* |