Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-22126

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authentic

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point (Meru AP and FortiAP-U) as root using the default hard-coded username and password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiWLC

Default version status: unaffected

  • 8.5.0 to ≤ 8.5.2affected
  • 8.4.4 to ≤ 8.4.8affected
  • 8.4.0 to ≤ 8.4.2affected
  • 8.3.2 to ≤ 8.3.3affected
  • 8.2.6 to ≤ 8.2.7affected

References