CVE-2022-40684

🗓️ 18 Oct 2022 00:00:00Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 15 Media mentions👁 1450 Views🌐 WEB

Authentication bypass in Fortinet FortiOS, FortiProxy, and FortiSwitchManager [CWE-288

Reporter	Title	Published	Views	Family All 64
0day.today	Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass Exploit	19 Oct 202200:00	–	zdt
0day.today	FortiOS FortiProxy FortiSwitchManager v7.2.1 - Authentication Bypass Vulnerability	27 Mar 202300:00	–	zdt
GithubExploit	Exploit for Improper Authentication in Fortinet Fortiproxy	27 Oct 202215:11	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Fortinet Fortiproxy	21 Oct 202208:07	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Fortinet Fortiproxy	26 Oct 202201:48	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Fortinet Fortiproxy	13 Oct 202214:24	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Fortinet Fortiproxy	13 Oct 202219:53	–	githubexploit
GithubExploit	MCATester	24 Jun 202605:32	–	githubexploit
GithubExploit	FortiGate-FortiWeb-Multi-Exploit-Extractor	14 May 202614:07	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Fortinet Fortiproxy	13 Oct 202218:13	–	githubexploit

NVD

Node

fortinet fortiproxyRange7.0.0–7.0.7

fortinet fortiproxyMatch7.2.0

fortinet fortiswitchmanagerMatch7.0.0

fortinet fortiswitchmanagerMatch7.2.0

fortinet fortiosRange7.0.0–7.0.7

fortinet fortiosRange7.2.0–7.2.2

[
  {
    "vendor": "Fortinet",
    "product": "Fortinet FortiOS, FortiProxy, FortiSwitchManager",
    "versions": [
      {
        "version": "FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html
fortiguard	www.fortiguard.com/psirt/FG-IR-22-377
packetstormsecurity	www.packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
ssh-public-key1	path	system/admin/{username}	Add SSH key to the target account's authorized_keys via PUT to /system/admin/{username} to gain access.	CWE-287
ssh-public-key2	path	system/admin/{username}	Add SSH key to the target account's authorized_keys via PUT to /system/admin/{username} to gain access.	CWE-287
ssh-public-key3	path	system/admin/{username}	Add SSH key to the target account's authorized_keys via PUT to /system/admin/{username} to gain access.	CWE-287

17 Jun 2026 05:01Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.99984

SSVC