CVE-2017-7341
EUVD-2017-1636826.10.2017, 13:29
An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiwlc | 6.1-2 ≤ 𝑥 ≤ 6.1-5 |
| fortinet | fortiwlc | 7.0-7 ≤ 𝑥 ≤ 7.0-10 |
| fortinet | fortiwlc | 8.0 ≤ 𝑥 ≤ 8.2 |
| fortinet | fortiwlc | 8.3.0 ≤ 𝑥 ≤ 8.3.2 |
𝑥
= Vulnerable software versions