Hard-coded credentials in Fortinet FortiRecorder
Priority MEDIUM 52CWE-798Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.
Summary
Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01518 74th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Fortinet FortiRecorder | FortiRecorder all versions below 2.7.4 | — | No fix listed | CNA |
- Fortinet FortiRecorder Vendor— Affected FortiRecorder all versions below 2.7.4 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:* | before 2.7.4 | Vulnerable | Fortinet |
| cpe:2.3:h:fortinet:fortirecorder_100d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
| cpe:2.3:h:fortinet:fortirecorder_200d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
| cpe:2.3:h:fortinet:fortirecorder_400d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fortinet |
- cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:* Versions before 2.7.4 Vulnerable ·Fortinet
- cpe:2.3:h:fortinet:fortirecorder_100d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
- cpe:2.3:h:fortinet:fortirecorder_200d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
- cpe:2.3:h:fortinet:fortirecorder_400d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fortinet
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-6698
- 2026-10-03 Alias added: GHSA-7f85-jgjr-85qj
References
More Fortinet Fortirecorder Firmware vulnerabilities
- TI-2022-19828 Uncontrolled resource consumption in Fortinet FortiRecorder CVSS 3.1HIGH 7.5
- TI-2021-18961 Buffer overflow in Fortinet FortiOS CVSS 3.1MEDIUM 6.7
- TI-2022-06627 An incomplete filtering of one or more instances of special elements vulnerability… CVSS 3.1MEDIUM 5.5
- TI-2021-18959 Integer overflow in Fortinet FortiSwitch, FortiRecorder, FortiVoiceEnterprise, FortiOS… CVSS 3.1MEDIUM 4.3
Sources
- CVE-2019-6698 · CVE Program
- CVE-2019-6698 · NVD
- FIRST EPSS
- GHSA-7f85-jgjr-85qj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences