Fortinet: >> Fortiwlc >> 8.5.5 Security Vulnerabilities
An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command.
CVSS Score
7.3
EPSS Score
0.0
Published
2024-12-19
An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.
CVSS Score
8.8
EPSS Score
0.005
Published
2021-12-08