CVE-2017-7336
A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - psirt@fortinet.com
- Published
- 2017-07-22
- Last modified
- 2024-10-25
- Weaknesses
- CWE-798
Affected products
References
- http://www.securityfocus.com/bid/99351
- https://fortiguard.com/advisory/FG-IR-17-115
