What is CVE-2019-6698?

CVE-2019-6698 is a critical-severity vulnerability in Fortinet Fortirecorder_100d, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2019-08-23.

How severe is CVE-2019-6698?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Fortinet Fortirecorder_100d

CVE-2019-6698

Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provi…

EPSS: 0.015 (71.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortinet Fortirecorder_100d
Fortinet Fortirecorder_200d
Fortinet Fortirecorder_400d
Fortinet Fortirecorder_firmware
N/a Fortinet Fortirecorder — versions FortiRecorder all versions below 2.7.4

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-6698?: CVE-2019-6698 is a critical-severity vulnerability in Fortinet Fortirecorder_100d, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2019-08-23.
How severe is CVE-2019-6698?: Critical severity. CVSS v3 base score is 9.8 out of 10.