Vulnerability Details CVE-2017-7336
A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2017-7336
-
cpe:2.3:a:fortinet:fortiwlm:8.2.2
-
cpe:2.3:a:fortinet:fortiwlm:8.2.4
-
cpe:2.3:a:fortinet:fortiwlm:8.3.0