Unauthorized Access in Fortinet FortiWLC Due to Hardcoded Account

CVE-2016-8491

What is CVE-2016-8491?

The Fortinet FortiWLC product includes a hardcoded account named 'core', which can be exploited by attackers to gain unauthorized read/write access through a remote shell interface. This vulnerability poses significant risks to the integrity and confidentiality of system data, as it allows remote attackers to manipulate the system without proper authentication. Organizations using FortiWLC should take immediate action to mitigate this risk.

References