CVE-2019-6698

Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:fortinet:fortirecorder_100d:-:*:*:*:*:*:*:*
cpe:2.3:h:fortinet:fortirecorder_200d:-:*:*:*:*:*:*:*
cpe:2.3:h:fortinet:fortirecorder_400d:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:46

Type Values Removed Values Added
References () https://fortiguard.com/advisory/FG-IR-19-185 - Vendor Advisory () https://fortiguard.com/advisory/FG-IR-19-185 - Vendor Advisory

Information

Published : 2019-08-23 20:15

Updated : 2024-11-21 04:46


NVD link : CVE-2019-6698

Mitre link : CVE-2019-6698

CVE.ORG link : CVE-2019-6698


JSON object : View

Products Affected

fortinet

  • fortirecorder_firmware
  • fortirecorder_200d
  • fortirecorder_100d
  • fortirecorder_400d
CWE
CWE-798

Use of Hard-coded Credentials