CVE-2019-6698

Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device.
References
Link Resource
https://fortiguard.com/advisory/FG-IR-19-185 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:fortinet:fortirecorder_100d:-:*:*:*:*:*:*:*
cpe:2.3:h:fortinet:fortirecorder_200d:-:*:*:*:*:*:*:*
cpe:2.3:h:fortinet:fortirecorder_400d:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-08-23 20:15

Updated : 2024-02-28 17:08


NVD link : CVE-2019-6698

Mitre link : CVE-2019-6698

CVE.ORG link : CVE-2019-6698


JSON object : View

Products Affected

fortinet

  • fortirecorder_200d
  • fortirecorder_400d
  • fortirecorder_100d
  • fortirecorder_firmware
CWE
CWE-798

Use of Hard-coded Credentials