Skip to content
Sign in
8.8 High

CVE-2021-42758 An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote…

Description

An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiWLC Versions not published

Other CVEs of Fortinet FortiWLC

The 3 CVEs of Fortinet FortiWLC →
CVE-2020-9288 An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform… Not rated CVE-2016-8491 The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write… Not rated
Track this CVE