CVE-2016-7560

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
fortinetfortiwlc
𝑥
≤ 6.1-2-29
fortinetfortiwlc
7.0-9-1
fortinetfortiwlc
7.0-10-0
fortinetfortiwlc
8.0-5-0
fortinetfortiwlc
8.1-2-0
fortinetfortiwlc
8.2-4-0
𝑥
= Vulnerable software versions