CVE-2021-42758

An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@fortinet.com

Published

2021-12-08

Last modified

2024-10-25

Weaknesses

CWE-284, CWE-863

Affected products

• Fortinet Fortiwlc (Fortinet)
• Fortiwlc (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-21-200