CVE-2022-40684

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://www.fortiguard.com/psirt/FG-IR-22-377; https://nvd.nist.gov/vuln/detail/CVE-2022-40684

Remediation deadline: November 1, 2022

Ransomware use: Known

Description

Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Timeline

Published:October 11th, 2022 12:00 AM

Last modified:October 11th, 2022 12:00 AM

Added to KEV:October 11th, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Fortinet

Products

Multiple Products

Weaknesses (CWE)

CWE-288

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute