Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-18538
HistoryMar 02, 2022 - 12:00 a.m.

Fortinet FortiWLM Command Injection Vulnerability

2022-03-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
fortinet
fortiwlm
command injection
vulnerability
wireless lan
controller
input validation
http requests
operating system commands
security
alert dashboard
configuration handler
cnvd

EPSS

0.001

Percentile

48.5%

A command injection vulnerability exists in Fortinet FortiWLC, a wireless LAN controller from Fortinet, which stems from a failure to properly validate input data in the alert dashboard and controller configuration handler. HTTP requests and execute arbitrary operating system commands on the target system.

EPSS

0.001

Percentile

48.5%

Related for CNVD-2022-18538