CVE-2016-4573

Name: CVE-2016-4573
Creator: NVD / NIST
Published: 2016-09-09T14:05:07.393+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.56%

Last modified Jun 17, 2026

CVE-2016-4573 is a vulnerability of currently unknown severity. Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.. EPSS estimates a 4.56% chance of exploitation in the next 30 days.

Description

Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.

Metrics

EPSS Probability

4.56%

90.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions
Fortinet	Fortiswitch	3.4.1

References

http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditionsVendor Advisory
http://www.securityfocus.com/bid/92450
https://www.themissinglink.com.au/security/advisories/cve-2016-4573Third Party Advisory
http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditionsVendor Advisory
http://www.securityfocus.com/bid/92450
https://www.themissinglink.com.au/security/advisories/cve-2016-4573Third Party Advisory

Timeline

Published: Sep 9, 2016
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-4573?

How severe is CVE-2016-4573?

Severity scoring for CVE-2016-4573 is pending analysis. The EPSS model estimates a 4.56% probability of exploitation in the next 30 days.

How do I fix CVE-2016-4573?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-4573?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST