CVE-2021-26102
CRITICALFortiWAN 4.4.0-4.5.7 - Unauthenticated Path Traversal via Crafted POST Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-26102. PoCs published by SleepyCofe.
AI-analyzed exploit summary The PoC exploits an authentication bypass vulnerability in FortiWAN by sending a crafted POST request to delete the admin password file, resetting credentials to default (Administrator:1234). It demonstrates the vulnerability by leveraging a path traversal flaw in the login.php script.
Description
A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value.
Exploits (1)
The PoC exploits an authentication bypass vulnerability in FortiWAN by sending a crafted POST request to delete the admin password file, resetting credentials to default (Administrator:1234). It demonstrates the vulnerability by leveraging a path traversal flaw in the login.php script.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H