Today > | 2 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2021-26093

Dec. 19, 2024, 8:15 a.m.

CVSS Score

7.3 / 10

Product(s) Impacted

FortiWLC

8.6.0
8.5.3 and earlier

Description

An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command.

Weaknesses

CWE-824

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

CWE ID: 824

Date

Published: Dec. 19, 2024, 8:15 a.m.

Last Modified: Dec. 19, 2024, 8:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@fortinet.com

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

Base Score

7.3

Exploitability Score

2.0

Impact Score

4.7

Base Severity