exploitDog

CVE-2016-8491

Опубликовано: 01 фев. 2017

Источник: nvd

CVSS3: 9.1

CVSS2: 9.4

EPSS Низкий

Описание

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.

Ссылки

http://www.securityfocus.com/bid/94186
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-16-065
Vendor Advisory
http://www.securityfocus.com/bid/94186
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-16-065
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:fortinet:fortiwlc:7.0-9-1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiwlc:7.0-10-0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiwlc:8.1-2-0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiwlc:8.1-3-2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiwlc:8.2-4-0:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00272

Низкий

9.1 Critical

CVSS3

9.4 Critical

CVSS2

Дефекты

CWE-798

Связанные уязвимости

GHSA-pxp7-p7xv-7463

CVSS3: 9.1

github

больше 3 лет назад

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.

EPSS

Процентиль: 50%

0.00272

Низкий

9.1 Critical

CVSS3

9.4 Critical

CVSS2

Дефекты

CWE-798