Lucene search

CVE-2022-39948

🗓️ 16 Feb 2023 19:12:15Reported by [email protected]Type

An improper certificate validation vulnerability in FortiOS and FortiProxy may allow a remote attacker to perform a Man-in-the-Middle attack

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2022-39948	16 Feb 202318:06	–	cvelist
Tenable Nessus	Fortinet Fortigate Lack of certificate verification when establishing secure connections with threat feed fabric connectors (FG-IR-22-257)	17 Apr 202300:00	–	nessus
Fortinet	Protect	16 Feb 202300:00	–	fortinet
Prion	Input validation	16 Feb 202319:15	–	prion
CVE	CVE-2022-39948	16 Feb 202319:15	–	cve
Vulnrichment	CVE-2022-39948	16 Feb 202318:06	–	vulnrichment
ICS	Siemens RUGGEDCOM APE1808 with Fortigate NGFW Devices	12 Mar 202400:00	–	ics

Nvd

Node

fortinet fortiproxyRange1.2.0–2.0.9

fortinet fortiproxyRange7.0.0–7.0.7

fortinet fortiosRange6.0.0–7.0.8

fortinet fortiosRange7.2.0–7.2.4

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-22-257

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Feb 2023 19:15Current

6.2Medium risk

Vulners AI Score6.2

CVSS37.4

EPSS0.00081

CWE-295