CVE-2017-7341

7.2 highEPSS 3.9%

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests.

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2017-10-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiwlc

References

http://www.securityfocus.com/bid/101273
https://fortiguard.com/psirt/FG-IR-17-119
http://www.securityfocus.com/bid/101273
https://fortiguard.com/psirt/FG-IR-17-119

Check your stack JSON