A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests.
The product uses a hard-coded, unchangeable cryptographic key.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fortiswitch | Fortinet | 6.0.0 (including) | 6.2.8 (excluding) |
| Fortiswitch | Fortinet | 6.4.0 (including) | 6.4.14 (excluding) |
| Fortiswitch | Fortinet | 7.0.0 (including) | 7.0.8 (excluding) |
| Fortiswitch | Fortinet | 7.2.0 (including) | 7.2.6 (excluding) |
| Fortiswitch | Fortinet | 7.4.0 (including) | 7.4.0 (including) |