← CVE Intelligence

CVE-2021-22126

Fortinet / FortiWLC PUBLISHED

Description (CNA)

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point (Meru AP and FortiAP-U) as root using the default hard-coded username and password.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiWLCaffected 8.5.0 through 8.5.2; affected 8.4.4 through 8.4.8; affected 8.4.0 through 8.4.2; affected 8.3.2 through 8.3.3; affected 8.2.6 through 8.2.7

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.