Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploitDD91FE12-6083-55DD-BD86-5F82A339F7BA
HistoryFeb 27, 2023 - 6:05 p.m.

Exploit for Improper Authentication in Fortinet Fortiswitchmanager

2023-02-2718:05:34
121

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON

CVE-2022-40684

一键枚举所有用户名以及写入SSH公钥

整合并优化了这两个仓库的代码，使其实现…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

hackread 1
nuclei 1
githubexploit 21
checkpoint_advisories 1
hivepro 2
zdt 2
cisa_kev 1
wordfence 1
thn 5
packetstorm 2
prion 1
fortinet 1
rapid7blog 4
cve 1
nessus 1
metasploit 1
exploitdb 1
attackerkb 1
qualysblog 2
wallarmlab 1
ics 1
hackread
hackread
Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs
2022-11-28 20:17:04
nuclei
nuclei
Fortinet - Authentication Bypass
2022-10-14 09:09:38
githubexploit
githubexploit
Exploit for Improper Authentication in Fortinet Fortiswitchmanager
2023-09-14 21:29:03
Exploit for Improper Authentication in Fortinet Fortiswitchmanager
2022-10-13 18:13:59
Exploit for Improper Authentication in Fortinet Fortiswitchmanager
2022-10-13 14:24:12
checkpoint_advisories
checkpoint_advisories
Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)
2022-10-23 00:00:00
hivepro
hivepro
Vulnerability in Fortinet allows authentication bypass
2022-10-11 07:22:07
Threat Actors launch a campaign to exploit vulnerability in Fortinet
2022-10-28 08:52:38
zdt
zdt
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass Exploit
2022-10-19 00:00:00
FortiOS FortiProxy FortiSwitchManager v7.2.1 - Authentication Bypass Vulnerability
2023-03-27 00:00:00
cisa_kev
cisa_kev
Fortinet Multiple Products Authentication Bypass Vulnerability
2022-10-11 00:00:00
wordfence
wordfence
Threat Advisory: CVE-2022-40684 Fortinet Appliance Auth bypass
2022-10-13 21:08:36
thn
thn
Fortinet Warns of New Auth Bypass Flaw Affecting FortiGate and FortiProxy
2022-10-07 16:47:00
PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks
2022-10-14 03:35:00
Fortinet Warns of Active Exploitation of Newly Discovered Critical Auth Bypass Bug
2022-10-11 06:21:00
packetstorm
packetstorm
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass
2022-10-19 00:00:00
Fortinet 7.2.1 Authentication Bypass
2023-03-27 00:00:00
prion
prion
Authentication flaw
2022-10-18 14:15:00
fortinet
fortinet
Protect
2022-10-10 00:00:00
rapid7blog
rapid7blog
[Security Nation] James Kettle of PortSwigger on Advancing Web-Attack Research
2022-10-12 18:05:46
CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies
2022-10-07 16:24:42
Metasploit Weekly Wrap-Up
2022-10-21 17:31:54
cve
cve
CVE-2022-40684
2022-10-18 14:15:00
nessus
nessus
Fortinet Fortigate Authentication Bypass (FG-IR-22-377)
2022-10-07 00:00:00
metasploit
metasploit
Fortinet FortiOS, FortiProxy, and FortiSwitchManager authentication bypass.
2022-10-14 20:19:43
exploitdb
exploitdb
FortiOS, FortiProxy, FortiSwitchManager v7.2.1 - Authentication Bypass
2023-03-27 00:00:00
attackerkb
attackerkb
CVE-2022-40684
2022-10-18 00:00:00
qualysblog
qualysblog
Qualys Research Team: Threat Thursdays, October 2022
2022-10-28 00:58:53
October 2022 Patch Tuesday | Microsoft Releases 84 Vulnerabilities with 13 Critical, plus 12 Microsoft Edge (Chromium-Based); Adobe Releases 4 Advisories, 29 Vulnerabilities with 17 Critical.
2022-10-11 20:00:00
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
ics
ics
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON
Related for DD91FE12-6083-55DD-BD86-5F82A339F7BA
hackread1nuclei1githubexploit21checkpoint_advisories1hivepro2zdt2cisa_kev1wordfence1thn5packetstorm2prion1fortinet1rapid7blog4cve1nessus1metasploit1exploitdb1attackerkb1qualysblog2wallarmlab1ics1