← Database

CVE-2021-42758

HIGH CVSS: 8.8 Published: 2021-12-08 Modified: 2026-06-17

Description

An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.

Affected Platforms

Fortinet Fortiwlc

Weakness Type

CWE-863

References