Vendor / Project: Fortinet Product: Multiple Products Description: Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. Required Action: Apply updates per vendor instructions. Due Date: 2022-11-01 Ransomware Campaign Use: Known CWEs: CWE-288 Notes: https://www.fortiguard.com/psirt/FG-IR-22-377; https://nvd.nist.gov/vuln/detail/CVE-2022-40684
CVE-2022-40684 — Fortinet Multiple Products Authentication Bypass Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-10-11 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 9.8
- Quelle-ID:
cisa_kev - uid_hash:
f66b8dc9a16a4e62ee120678e8acee2136e20636a284134eacedd96b98c66e5b
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2022-10-18 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |