CVE-2017-7336

Summary

A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges.

Affected Software

VendorProductVersion RangeStatus
Fortinet, Inc.Fortinet FortiWLM8.3.0 and loweraffected

Weaknesses

  • Hard-coded credentials

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References