CVE-2016-7560

—

CVSS 3.0

9.8 critical

EPSS

3%p85

Published

Oct 5, 2016 (Oct 5, 2016)

Modified

Jun 17, 2026

Description

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors.

Vendors: fortinet
Products: fortiwlc
Weakness: CWE-798
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.