CVE Catalog
CVE-2017-7336
CriticalSummary
A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges.
Risk Assessment
An attacker can gain access to the system with elevated privileges, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update Fortinet FortiWLM to the latest version to remove the hard-coded account and restrict system access.
Original NVD description (English source)
A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges.