CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2016-4573

CVSS 9.8v3.0pub. 2016-09-09upd. 2026-05-06

Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Fortinet Fortiswitch

    OS
    Fortinet
    3.4.1

  • Fortinet Fsw 1024d

    HW
    Fortinet
    all versions

  • Fortinet Fsw 1048d

    HW
    Fortinet
    all versions

  • Fortinet Fsw 108d Poe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 124d

    HW
    Fortinet
    all versions

  • Fortinet Fsw 124d Poe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 224d Fpoe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 224d Poe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 248d Fpoe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 248d Poe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 3032d

    HW
    Fortinet
    all versions

  • Fortinet Fsw 424d

    HW
    Fortinet
    all versions

  • Fortinet Fsw 424d Fpoe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 424d Poe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 448d

    HW
    Fortinet
    all versions

  • Fortinet Fsw 448d Fpoe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 448d Poe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 524d

    HW
    Fortinet
    all versions

  • Fortinet Fsw 524d Fpoe

    HW
    Fortinet
    all versions

  • Fortinet Fsw 548d

    HW
    Fortinet
    all versions

  • Fortinet Fsw 548d Fpoe

    HW
    Fortinet
    all versions

  • Fortinet Fsw R 112d Poe

    HW
    Fortinet
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2024-48887CRITICAL9.8PL ✓same product

Fortinet FortiSwitch — nieautoryzowana zmiana hasła administratora (RCE-ready)

CVE-2023-25610CRITICAL9.8PL ✓same product

Buffer Underflow w interfejsie administracyjnym Fortinet FortiOS / FortiProxy — RCE bez uwierzytelnienia

CVE-2023-37936CRITICAL9.8PL ✓same product

Fortinet FortiSwitch — użycie zakodowanego klucza kryptograficznego umożliwia RCE

CVE-2016-6909CRITICAL9.8PL ✓same product

Buffer overflow w parserze Cookie w Fortinet FortiOS/FortiSwitch — RCE

CVE-2023-37937HIGH7.8same product

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet Fort...