CVE-2016-4573 Auth bypass in n/a

Critical 9.8 Published 9 Sep 2016 Updated 6 Aug 2024

Remote attackers can bypass authentication and gain administrative access on FortiSwitch devices in FortiLink mode by using an empty password for the rest_admin account.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2016-4573?

CVE-2016-4573 is a critical authentication bypass vulnerability in n/a, published on 9 Sep 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.

Weakness: CWE-264

Which versions are affected by CVE-2016-4573?

It affects 1 product.

Products include Fortinet Fortiswitch.

How do I fix CVE-2016-4573?

No fix has been published for CVE-2016-4573 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2016-4573 being exploited?

There is no known exploitation of CVE-2016-4573 in the wild and no public exploit code.

Sources

Also known as GHSA-3hqg-24jc-82m9.