Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-40684
HistoryOct 18, 2022 - 2:15 p.m.

CVE-2022-40684

2022-10-1814:15:00
CWE-287
[email protected]
web.nvd.nist.gov
1135
In Wild
13
23
cve-2022-40684
authentication bypass
fortinet
fortios
fortiproxy
fortiswitchmanager
cwe-288
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Social References

More

Related

checkpoint_advisories 1
githubexploit 22
hivepro 2
zdt 2
cisa_kev 1
wordfence 1
hackread 1
nuclei 1
packetstorm 2
thn 5
prion 1
rapid7blog 4
fortinet 1
nessus 1
metasploit 1
exploitdb 1
attackerkb 1
qualysblog 2
wallarmlab 1
ics 1
checkpoint_advisories
checkpoint_advisories
Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)
2022-10-23 00:00:00
githubexploit
githubexploit
Exploit for CVE-2022-40684
2022-10-12 14:32:15
Exploit for CVE-2022-40684
2022-10-13 13:12:14
Exploit for CVE-2022-40684
2022-10-19 19:51:33
hivepro
hivepro
Vulnerability in Fortinet allows authentication bypass
2022-10-11 07:22:07
Threat Actors launch a campaign to exploit vulnerability in Fortinet
2022-10-28 08:52:38
zdt
zdt
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass Exploit
2022-10-19 00:00:00
FortiOS FortiProxy FortiSwitchManager v7.2.1 - Authentication Bypass Vulnerability
2023-03-27 00:00:00
cisa_kev
cisa_kev
Fortinet Multiple Products Authentication Bypass Vulnerability
2022-10-11 00:00:00
wordfence
wordfence
Threat Advisory: CVE-2022-40684 Fortinet Appliance Auth bypass
2022-10-13 21:08:36
hackread
hackread
Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs
2022-11-28 20:17:04
nuclei
nuclei
Fortinet - Authentication Bypass
2022-10-14 09:09:38
packetstorm
packetstorm
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass
2022-10-19 00:00:00
Fortinet 7.2.1 Authentication Bypass
2023-03-27 00:00:00
thn
thn
Fortinet Warns of New Auth Bypass Flaw Affecting FortiGate and FortiProxy
2022-10-07 16:47:00
PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks
2022-10-14 03:35:00
Fortinet Warns of Active Exploitation of Newly Discovered Critical Auth Bypass Bug
2022-10-11 06:21:00
prion
prion
Authentication flaw
2022-10-18 14:15:00
rapid7blog
rapid7blog
[Security Nation] James Kettle of PortSwigger on Advancing Web-Attack Research
2022-10-12 18:05:46
CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies
2022-10-07 16:24:42
Metasploit Weekly Wrap-Up
2022-10-21 17:31:54
fortinet
fortinet
Protect
2022-10-10 00:00:00
nessus
nessus
Fortinet Fortigate Authentication Bypass (FG-IR-22-377)
2022-10-07 00:00:00
metasploit
metasploit
Fortinet FortiOS, FortiProxy, and FortiSwitchManager authentication bypass.
2022-10-14 20:19:43
exploitdb
exploitdb
FortiOS, FortiProxy, FortiSwitchManager v7.2.1 - Authentication Bypass
2023-03-27 00:00:00
attackerkb
attackerkb
CVE-2022-40684
2022-10-18 00:00:00
qualysblog
qualysblog
Qualys Research Team: Threat Thursdays, October 2022
2022-10-28 00:58:53
October 2022 Patch Tuesday | Microsoft Releases 84 Vulnerabilities with 13 Critical, plus 12 Microsoft Edge (Chromium-Based); Adobe Releases 4 Advisories, 29 Vulnerabilities with 17 Critical.
2022-10-11 20:00:00
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
ics
ics
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON
Related for CVE-2022-40684
checkpoint_advisories1githubexploit22hivepro2zdt2cisa_kev1wordfence1hackread1nuclei1packetstorm2thn5prion1rapid7blog4fortinet1nessus1metasploit1exploitdb1attackerkb1qualysblog2wallarmlab1ics1