CVE-2017-7341

Description

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests.

Reserved 2017-03-30 | Published 2017-10-26 | Updated 2024-10-25 | Assigner fortinet

References

fortiguard.com/psirt/FG-IR-17-119

www.securityfocus.com/bid/101273 (101273) vdb-entry

cve.org (CVE-2017-7341)

nvd.nist.gov (CVE-2017-7341)

Download JSON