ID |
CVE-2021-22126
|
Sažetak |
A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point (Meru AP and FortiAP-U) as root using the default hard-coded username and password. |
Reference |
|
CVSS |
Base: | 6.7 |
Impact: | 5.9 |
Exploitability: | 0.8 |
|
Pristup |
Vektor | Složenost | Autentikacija |
LOCAL |
LOW |
HIGH |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
HIGH |
HIGH |
HIGH |
|
CVSS vektor |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Zadnje važnije ažuriranje |
17-03-2025 - 14:15 |
Objavljeno |
17-03-2025 - 14:15 |