CVE-2019-6698

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
n/a	Fortinet FortiRecorder	FortiRecorder all versions below 2.7.4

References

https://fortiguard.com/advisory/FG-IR-19-185Vendor Advisory
https://fortiguard.com/advisory/FG-IR-19-185Vendor Advisory

Timeline

Published: Aug 23, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-66995.4An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may allow an attacker to execute a stored Cross Sit CVE-2019-67006.5An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated CVE-2019-67025.9The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2 CVE-2019-67039.8Incorrect access control in migla_ajax_functions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauth CVE-2019-67067.5Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to tr CVE-2019-67077.2PHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state product_id[] parameter.CVE-2019-67087.2PHPSHE 1.7 has SQL injection via the admin.php?mod=order state parameter.CVE-2019-67108.8Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.CVE-2019-67139.8app\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code by using vectors invol CVE-2019-67149.8An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can c CVE-2019-67157.5pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL fie CVE-2019-67169.4An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a r