CVE-2017-17540: Fortinet Fortiwlc

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell.

Affected products

• Fortinet Fortiwlc: from 7.0, up to and including 7.0.11; from 8.0, up to and including 8.3.3

Published 2018-05-08. Last modified 2026-06-17.