critical9.1
CVE-2016-8491
The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.
Impact
The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiwlc | Versions 7.0-9-1, 7.0-10-0, 8.1-2-0, 8.1-3-2, 8.2-4-0 |