PT-2024-10896 · Fortinet · Fortiwlc

Published 2024-12-19 · Updated 2025-01-21 · CVE-2021-26093

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions FortiWLC versions 8.6.0, 8.5.3 and earlier

Description An access of uninitialized pointer vulnerability in FortiWLC may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command.

Recommendations For FortiWLC versions 8.6.0, 8.5.3 and earlier, consider disabling the execution of crafted CLI commands until a patch is available. As a temporary workaround, restrict access to the CLI to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

CVE-2021-26093

Affected Products

Fortiwlc

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2021-26093 · Security Note
• https://fortiguard.com/psirt/FG-IR-21-002 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26093 · Vendor Advisory
• https://twitter.com/CVEnew/status/1869658640338030968 · Twitter Post
• https://t.me/cvenotify/104867 · Telegram Post
• https://twitter.com/cracbot/status/1871435700673130864 · Twitter Post
• https://t.me/cvedetector/13313 · Telegram Post
• https://t.me/cvenotify/108135 · Telegram Post