CVE-2019-6698

2019-08-2319:58:39

fortinet

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device.

CNA Affected

[
  {
    "product": "Fortinet FortiRecorder",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FortiRecorder all versions below 2.7.4"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-19-185