PULSE
EN VIVO37señales / 24h
FEED
ransomgunra reclama a Dissinger and Dissinger Law Firm · US · Business Servicesransomplay reclama a Boston Electric and Telephone · US · Telecommunicationransomplay reclama a Wring Group · GB · Not Foundransomincransom reclama a asa-international.com · GB · Business Servicesransomplay reclama a AG Scholtes · NL · Manufacturingransomplay reclama a Andorra Life · AD · Healthcareransomplay reclama a Svensk Direktreklam · SE · Business Servicesransomchaos reclama a radiax.com · US · Technologyransominterlock reclama a Converting Equipment International · GB · Manufacturingransomblack x reclama a sanaa · YE · Not Foundransomthegentlemen reclama a Tangram Interiors · GB · Business Servicesransomthegentlemen reclama a BRAC · BD · Business Servicesransomthegentlemen reclama a Customs Watch · US · Public Sectorransomthegentlemen reclama a Gallant · FI · Not Foundransomgunra reclama a Dissinger and Dissinger Law Firm · US · Business Servicesransomplay reclama a Boston Electric and Telephone · US · Telecommunicationransomplay reclama a Wring Group · GB · Not Foundransomincransom reclama a asa-international.com · GB · Business Servicesransomplay reclama a AG Scholtes · NL · Manufacturingransomplay reclama a Andorra Life · AD · Healthcareransomplay reclama a Svensk Direktreklam · SE · Business Servicesransomchaos reclama a radiax.com · US · Technologyransominterlock reclama a Converting Equipment International · GB · Manufacturingransomblack x reclama a sanaa · YE · Not Foundransomthegentlemen reclama a Tangram Interiors · GB · Business Servicesransomthegentlemen reclama a BRAC · BD · Business Servicesransomthegentlemen reclama a Customs Watch · US · Public Sectorransomthegentlemen reclama a Gallant · FI · Not Found
← Todos los CVEs
CVE Watch

CVE-2019-6693

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

CVSS

Sin CVSS

EPSS

5.7%

p92

KEV

25 jun 2025

Exploit Today

78

0-100

Publicado: · Última mod.:

EPSS · 30d
5.4%EPSS · 30 días5.7%
2026-06-302026-07-16
Ficha del catálogo KEV

Producto

Fortinet / FortiOS

Vulnerabilidad

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Añadido a KEV

25 jun 2025

Remediar antes de

16 jul 2025

Uso conocido en ransomware

Descripción resumida

Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://fortiguard.com/advisory/FG-IR-19-007 ; https://nvd.nist.gov/vuln/detail/CVE-2019-6693

CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-13379
100.0%
KEV80Fortinet FortiOS SSL VPN Path Traversal Vulnerability
CVE-2022-42475
99.9%
KEV80Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
CVE-2024-21762
99.7%
KEV80Fortinet FortiOS Out-of-Bound Write Vulnerability
CVE-2020-12812
98.8%
KEV80Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
CVE-2019-5591
96.9%
KEV79Fortinet FortiOS Default Configuration Vulnerability
CVE-2022-41328
95.7%
KEV79Fortinet FortiOS Path Traversal Vulnerability