Fortinet Fortiwlc vulnerabilities

3 vulnerabilities

Known vulnerabilities in Fortinet Fortiwlc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CVE-2021-42758fortinetfortinet fortiwlc+1
EPSS score
2.02%
An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.9.4CVE-2016-8491fortinetfortinet fortiwlc+1
EPSS score
1.52%
The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.5.4CVE-2020-9288fortinetfortinet fortiwlc+1
EPSS score
0.86%
An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile.