by Kastro
Paper/Archive/CVE-2022-40684

CVE-2022-40684

Fortinet Fortinet FortiOS, FortiProxy, FortiSwitchManager — Fortinet Multiple Products Authentication Bypass Vulnerability

KEV · due 1 Novransomware useEPSS 100%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (CNA)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Affected

ProductAffectedFixed inSource
Fortinet FortiOS, FortiProxy, FortiSwitchManagerFortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0–CNA

Scores by source

fortinet (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reffortiguard.com/psirt/FG-IR-22-377refpacketstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.htmlrefpacketstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684kevcisa.gov/known-exploited-vulnerabilities-catalog