CVEvulnerability

CVE-2017-7341

7.2 HIGH Published 2017-10-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-10-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests.

Affected configurations

• fortinet fortiwlc (>= 6.1-2 <= 6.1-5) • fortinet fortiwlc (>= 7.0-7 <= 7.0-10) • fortinet fortiwlc (>= 8.0 <= 8.2) • fortinet fortiwlc (>= 8.3.0 <= 8.3.2)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References