Skip to content
fr Sign in
6.5 Medium

CVE-2021-22126 A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3…

Description

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point (Meru AP and FortiAP-U) as root using the default hard-coded username and password.

Affected products and versions

Product Affected versions Fixed in
FortiWLC 8.5 8.5.0 → 8.5.2 No fix stated
FortiWLC 8.4 8.4.0 → 8.4.8 No fix stated
FortiWLC 8.3 8.3.2 → 8.3.3 No fix stated
FortiWLC 8.2 8.2.6 → 8.2.7 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiWLC

The 5 CVEs of FortiWLC →
CVE-2021-32584 An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and… 4.8 Medium CVE-2021-26087 An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below,… 4.2 Medium CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium CVE-2021-26093 An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a… 6.6 Medium
Track this CVE