Search
Find a vulnerability
Search criteria
1 vulnerability found for fsw-424d by fortinet
VAR-201609-0330
Vulnerability from variot - Updated: 2025-04-12 23:30Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account. Fortinet FortiSwitch are prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. This issue is fixed in: FortiSwitch 3.4.2. Fortinet FortiSwitch is a security switching platform specially designed for Ethernet infrastructure and current network edge configuration from Fortinet. Security flaws exist in several Fortinet products. The following products are affected when in FortiLink managed mode and when upgrading to version 3.4.1: Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW- 248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D- FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, FSW-R-112D-POE module
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201609-0330",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "fortiswitch",
"scope": "eq",
"trust": 2.7,
"vendor": "fortinet",
"version": "3.4.1"
},
{
"model": "fsw-1024d",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-1048d",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-108d-poe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-124d",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-124d-poe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-224d-fpoe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-224d-poe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-248d-fpoe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-248d-poe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-3032d",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-424d",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-424d-fpoe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-424d-poe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-448d",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-448d-fpoe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-448d-poe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-524d",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-524d-fpoe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-548d",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-548d-fpoe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fsw-r-112d-poe",
"scope": null,
"trust": 0.8,
"vendor": "fortinet",
"version": null
},
{
"model": "fortiswitch",
"scope": "ne",
"trust": 0.3,
"vendor": "fortinet",
"version": "3.4.2"
}
],
"sources": [
{
"db": "BID",
"id": "92450"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
},
{
"db": "NVD",
"id": "CVE-2016-4573"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:fortinet:fortiswitch",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-1024d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-1048d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-108d-poe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-124d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-124d-poe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-224d-fpoe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-224d-poe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-248d-fpoe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-248d-poe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-3032d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-424d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-424d-fpoe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-424d-poe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-448d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-448d-fpoe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-448d-poe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-524d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-524d-fpoe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-548d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-548d-fpoe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:fortinet:fsw-r-112d-poe",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Emma Ferguson of The Missing Link Security",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
}
],
"trust": 0.6
},
"cve": "CVE-2016-4573",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2016-4573",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-93392",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2016-4573",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2016-4573",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2016-4573",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNNVD",
"id": "CNNVD-201607-173",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-93392",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-93392"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
},
{
"db": "NVD",
"id": "CVE-2016-4573"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account. Fortinet FortiSwitch are prone to a security-bypass vulnerability. \nAttackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. \nThis issue is fixed in:\nFortiSwitch 3.4.2. Fortinet FortiSwitch is a security switching platform specially designed for Ethernet infrastructure and current network edge configuration from Fortinet. Security flaws exist in several Fortinet products. The following products are affected when in FortiLink managed mode and when upgrading to version 3.4.1: Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW- 248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D- FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, FSW-R-112D-POE module",
"sources": [
{
"db": "NVD",
"id": "CVE-2016-4573"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"db": "BID",
"id": "92450"
},
{
"db": "VULHUB",
"id": "VHN-93392"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2016-4573",
"trust": 2.8
},
{
"db": "BID",
"id": "92450",
"trust": 1.4
},
{
"db": "JVNDB",
"id": "JVNDB-2016-004583",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201607-173",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-93392",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-93392"
},
{
"db": "BID",
"id": "92450"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
},
{
"db": "NVD",
"id": "CVE-2016-4573"
}
]
},
"id": "VAR-201609-0330",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-93392"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-12T23:30:33.777000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "FortiSwitch rest_admin account exposed under specific conditions",
"trust": 0.8,
"url": "http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions"
},
{
"title": "Fortinet FortiSwitch Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=62761"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-93392"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"db": "NVD",
"id": "CVE-2016-4573"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions"
},
{
"trust": 2.0,
"url": "https://www.themissinglink.com.au/security/advisories/cve-2016-4573"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/bid/92450"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4573"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4573"
},
{
"trust": 0.3,
"url": "http://www.fortinet.com/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-93392"
},
{
"db": "BID",
"id": "92450"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
},
{
"db": "NVD",
"id": "CVE-2016-4573"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-93392"
},
{
"db": "BID",
"id": "92450"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
},
{
"db": "NVD",
"id": "CVE-2016-4573"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-09-09T00:00:00",
"db": "VULHUB",
"id": "VHN-93392"
},
{
"date": "2016-08-11T00:00:00",
"db": "BID",
"id": "92450"
},
{
"date": "2016-09-12T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"date": "2016-07-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201607-173"
},
{
"date": "2016-09-09T14:05:07.393000",
"db": "NVD",
"id": "CVE-2016-4573"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-11-28T00:00:00",
"db": "VULHUB",
"id": "VHN-93392"
},
{
"date": "2016-08-11T00:00:00",
"db": "BID",
"id": "92450"
},
{
"date": "2016-09-12T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-004583"
},
{
"date": "2016-10-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201607-173"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2016-4573"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Fortinet FortiSwitch FSW Vulnerabilities that bypass authentication in the model",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-004583"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201607-173"
}
],
"trust": 0.6
}
}