CVE-2023-26203CWE-798

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8…

Medium · published May 3, 2023

CVSS v3.1
6.1
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.3th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2023-05-03T21:27Z
EPSS history
Timeline
  • 03 MAY 21:27Z
    A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8…
    cvelistv5