CVE-2019-6698

published 2019-08-23

CVE-2019-6698: Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
fortinet	forticameras	—	—
fortinet	fortirecorder	—	—
fortinet	fortirecorder100d	—	—
fortinet	fortirecorder200d	—	—
fortinet	fortirecorder400d	—	—
fortinet	fortirecorder_firmware	< 2.7.4	2.7.4
fortinet	fortirecorderfirmware	—	—

CWE-798