{
    "id": "CVE-2016-4573",
    "published": "2016-09-09 14:05:07",
    "last_modified": "2026-06-17 00:47:48",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-264",
    "description": "Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.",
    "epss_score": "0.04561",
    "epss_percentile": "0.91349",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-07 18:17:14",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.8), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "fortinet",
            "product": "fortiswitch"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-1024d"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-1048d"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-108d-poe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-124d"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-124d-poe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-224d-fpoe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-224d-poe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-248d-fpoe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-248d-poe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-3032d"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-424d"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-424d-fpoe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-424d-poe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-448d"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-448d-fpoe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-448d-poe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-524d"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-524d-fpoe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-548d"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-548d-fpoe"
        },
        {
            "vendor": "fortinet",
            "product": "fsw-r-112d-poe"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions",
        "http://www.securityfocus.com/bid/92450",
        "https://www.themissinglink.com.au/security/advisories/cve-2016-4573",
        "http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions",
        "http://www.securityfocus.com/bid/92450",
        "https://www.themissinglink.com.au/security/advisories/cve-2016-4573"
    ]
}