CVE-2021-32584

EPSS 0.06%
Published 17.03.2025 13:05:44
Last modified 24.07.2025 20:17:07
Source psirt@fortinet.com
Teams watchlist Login
Open Login

An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionality by just specifying the correct URL.  The vulnerability applies only to limited CGI resources and might allow the unauthorized party to access configuration details.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Fortinet ≫ Fortiwlc Version >= 8.1.3 < 8.5.4

Fortinet ≫ Fortiwlc Version8.6.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.182

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
psirt@fortinet.com	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://fortiguard.fortinet.com/psirt/FG-IR-20-138

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-32584

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-32584

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-32584

EUVD