VULNERABILITY INTELLIGENCE

CVE-2017-7341

CVSS score7.2 HIGH

EPSS probability3.90%

CISA KEVNot currently listed

Published2017-10-26

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests.

Weakness classification

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Primary references

psirt@fortinet.com — Third Party Advisory, VDB Entry
psirt@fortinet.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory