Local Access Control Vulnerability in Fortinet's Wireless Controller Products
CVE-2021-26093
What is CVE-2021-26093?
CVE-2021-26093 describes a vulnerability within Fortinet's FortiWLC wireless controller software, specifically versions 8.6.0, 8.5.3, and prior releases. This security flaw involves an uninitialized pointer access (CWE-824), which could empower a local and authenticated attacker to execute specially crafted CLI commands. By doing so, the attacker could potentially crash the managed access point, leading to significant disruptions in network reliability and availability. Organizations using impacted versions are strongly advised to assess their vulnerability management protocols and apply recommended patches to safeguard their network environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
FortiWLC 8.6.0
FortiWLC 8.5.0 <= 8.5.3
FortiWLC 8.4.4 <= 8.4.8
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved