FortiRecorder sets credentials of FortiCameras to static values

2019-08-1200:00:00

FortiGuard Labs

www.fortiguard.com

0.002 Low

EPSS

Percentile

60.7%

JSON

An Use of Hard-coded Credentials vulnerability in FortiRecorder may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device.

CPENameOperatorVersion
fortirecordereq2.7.3
fortirecordereq2.7.2
fortirecordereq2.7.1
fortirecordereq2.7.0
fortirecordereq2.6.3
fortirecordereq2.6.2
fortirecordereq2.6.1
fortirecordereq2.6.0
fortirecordereq2.5.5
fortirecordereq2.5.4

Name	Operator	Version
fortirecorder	eq	2.7.3
fortirecorder	eq	2.7.2
fortirecorder	eq	2.7.1
fortirecorder	eq	2.7.0
fortirecorder	eq	2.6.3
fortirecorder	eq	2.6.2
fortirecorder	eq	2.6.1
fortirecorder	eq	2.6.0
fortirecorder	eq	2.5.5
fortirecorder	eq	2.5.4

Rows per page:

1-10 of 221

0.002 Low

EPSS

Percentile

60.7%

JSON

Related for FG-IR-19-185