VYPR
← All advisories
High severity7.3NVD Advisory· Published Dec 19, 2024· Updated Jun 17, 2026

CVE-2021-26093

CVE-2021-26093

Description

An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command.

Affected products

3
  • Fortinet/Fortiwlc3 versions
    cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*range: >=8.0.6,<8.6.3
    • cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*range: 8.6.0
    • (no CPE)range: <=8.6.0, <=8.5.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.