NVD

Id
20186  
Name
CVE-2016-4573  
Description
Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-09-09  
Modified Date
2016-11-28  
Seq
2016-4573  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
110253 20186 CVE-2016-4573 http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions  View
110254 20186 CVE-2016-4573 92450  View
110255 20186 CVE-2016-4573 https://www.themissinglink.com.au/security/advisories/cve-2016-4573  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3810 JVNDB-2016-004583 複数の Fortinet FortiSwitch FSW モデルにおける認証を回避される脆弱性 複数の Fortinet FortiSwitch FSW モデルには、FortiLink モード (FortiLink managed mode) で 3.4.1 にアップグレードされた場合、認証を回避され、管理アクセス権を取得される脆弱性が存在します。 CVE-2016-4573 91079 CVE-2016-4573 20186 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004583.html 2016-07-11 2016-09-12 View