CVE-2021-42758high

CVE-2021-42758: high-severity vulnerability in Fortinet FortiWLC

Published · Updated

Follow this CVE+ Monitor FortiWLC

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 2.0%
An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R
Affected products
Fortinet · Fortinet FortiWLC
Related CVEs — Fortinet FortiWLC

In the same product, most dangerous first.

CVE-2016-8491—CVE-2016-8491EPSS 1.5%CVE-2020-9288—CVE-2020-9288EPSS 0.9%