Vulnerabilities CVE-2022-40684

CVE-2022-40684

Critical

Open

KEV

TLP:CLEAR

Fortinet Multiple Products Authentication Bypass Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Details

CVSS Score: 9.8
EPSS Score ⓘ: 99.98%

100th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
Confidence: 100%
Published: Oct 18, 2022
Last Modified: Aug 6, 2026
CISA KEV
Date Added: Oct 11, 2022
Patch Due: Nov 1, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.