Lucene search

[email protected]CVE-2022-35846

HistoryOct 18, 2022 - 2:15 p.m.

CVE-2022-35846

2022-10-1814:15:09

CWE-307

[email protected]

web.nvd.nist.gov

cve-2022-35846

cwe-307

fortitester

telnet

brute force attack

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.1%

JSON

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack.

Affected configurations

NVD

Node

fortinetfortitesterRange2.3.0–3.9.2

fortinetfortitesterRange4.0.0–4.2.1

fortinetfortitesterRange7.0.0–7.1.1

CPENameOperatorVersion
fortinet:fortitesterfortinet fortitesterlt3.9.2
fortinet:fortitesterfortinet fortitesterlt4.2.1
fortinet:fortitesterfortinet fortitesterlt7.1.1

CPE	Name	Operator	Version
fortinet:fortitester	fortinet fortitester	lt	3.9.2
fortinet:fortitester	fortinet fortitester	lt	4.2.1
fortinet:fortitester	fortinet fortitester	lt	7.1.1

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "Fortinet FortiTester",
    "versions": [
      {
        "version": "FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0",
        "status": "affected"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-22-244

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.1%

JSON

Related for CVE-2022-35846

fortinet1 prion1 nvd1 cvelist1