Vulnerability Intelligence Report
CVE-2016-4573
Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:4.56%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| fortinet | fortiswitch | 3.4.1 |
| fortinet | fsw-1024d | all |
| fortinet | fsw-1048d | all |
| fortinet | fsw-108d-poe | all |
| fortinet | fsw-124d | all |
| fortinet | fsw-124d-poe | all |
| fortinet | fsw-224d-fpoe | all |
| fortinet | fsw-224d-poe | all |
| fortinet | fsw-248d-fpoe | all |
| fortinet | fsw-248d-poe | all |
| fortinet | fsw-3032d | all |
| fortinet | fsw-424d | all |
| fortinet | fsw-424d-fpoe | all |
| fortinet | fsw-424d-poe | all |
| fortinet | fsw-448d | all |
| fortinet | fsw-448d-fpoe | all |
| fortinet | fsw-448d-poe | all |
| fortinet | fsw-524d | all |
| fortinet | fsw-524d-fpoe | all |
| fortinet | fsw-548d | all |
| fortinet | fsw-548d-fpoe | all |
| fortinet | fsw-r-112d-poe | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.561%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2016-05-10T00:00:00 |
| Published | 2016-09-09T14:00:00 |
| Patch Date | 2016-07-11 |
| Last Updated | 2024-08-06T00:32:25 |
Community Chatter & Buzz