Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2016-1909 — Fortinet Fortios vulnerability

CWE-2646 documents6 sources
Severity
9.8CRITICALNVD
EPSS
78.6%
top 0.96%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Fortinet Fortios
Timeline
PublishedJan 15
Latest updateMay 17

Description

Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x before 4.3.17 and 5.0.x before 5.0.8 have a hardcoded passphrase for the Fortimanager_Access account, which allows remote attackers to obtain administrative access via an SSH session.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDfortinet/fortios4.3.16+9

🔴Vulnerability Details

2
GHSA
GHSA-wpg3-7qph-4gvp: Fortinet FortiAnalyzer before 5↗2022-05-17
▶
CVEList
CVE-2016-1909: Fortinet FortiAnalyzer before 5↗2016-01-15
▶

💥Exploits & PoCs

2
Exploit-DB
Fortinet FortiGate 4.x < 5.0.7 - SSH Backdoor Access↗2016-01-09
▶
Metasploit
Fortinet SSH Backdoor Scanner↗
▶

🕵️Threat Intelligence

1
Unit42
Threat Brief: Microsoft DNS Server Wormable Vulnerability CVE-2020-1350↗2020-07-21
▶
CVE-2016-1909 — Fortinet Fortios vulnerability | cvebase