CVE-2017-7341
26.10.2017, 13:29
An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests.
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiwlc | 6.1-2 ≤ 𝑥 ≤ 6.1-5 |
| fortinet | fortiwlc | 7.0-7 ≤ 𝑥 ≤ 7.0-10 |
| fortinet | fortiwlc | 8.0 ≤ 𝑥 ≤ 8.2 |
| fortinet | fortiwlc | 8.3.0 ≤ 𝑥 ≤ 8.3.2 |
𝑥
= Vulnerable software versions