Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 09/09/2016 Updated: 28/11/2016

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote malicious users to bypass authentication and gain administrative access via an empty password for the rest_admin account.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fortinet fortiswitch 3.4.1

CWE-264 http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions https://www.themissinglink.com.au/security/advisories/cve-2016-4573 http://www.securityfocus.com/bid/92450 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-4573

Vulnerability Summary

References

Vulmon Search

About

Products

Connect