CVE-2016-7560

Critical

Published: 05/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The rsyncd server in Fortinet FortiWLC versions 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, allowing remote attackers to read or write to arbitrary files via unspecified vectors.

Risk Assessment

This vulnerability poses a risk of unauthorized access to files, potentially leading to loss of data confidentiality and modification of critical system files.

Recommendation

It is recommended to upgrade to the latest version of FortiWLC to remove the hardcoded rsync account and minimize the risk associated with this vulnerability.

Original NVD description (English source)

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors.