Lucene search
CISACISA-KEV-CVE-2022-40684HistoryOct 11, 2022 - 12:00 a.m.
Fortinet Multiple Products Authentication Bypass Vulnerability
2022-10-1100:00:00
CISA
www.cisa.gov
87
fortinet
authentication bypass
vulnerability
administrative interface
http
https
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.974
Percentile
99.9%
Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
Related
hivepro
hivepro
Vulnerability in Fortinet allows authentication bypass
2022-10-11 07:22:07
Threat Actors launch a campaign to exploit vulnerability in Fortinet
2022-10-28 08:52:38
githubexploit
githubexploit
Exploit for CVE-2022-40684
2022-10-13 13:12:14
Exploit for CVE-2022-40684
2022-10-12 06:53:18
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-13 21:07:50
checkpoint_advisories
checkpoint_advisories
Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)
2022-10-23 00:00:00
zdt
zdt
hackread
hackread
Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs
2022-11-28 20:17:04
nuclei
nuclei
Fortinet - Authentication Bypass
2022-10-14 09:09:38
packetstorm
packetstorm
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass
2022-10-19 00:00:00
Fortinet 7.2.1 Authentication Bypass
2023-03-27 00:00:00
nvd
nvd
CVE-2022-40684
2022-10-18 14:15:09
thn
thn
fortinet
fortinet
Protect
2022-10-10 00:00:00
rapid7blog
rapid7blog
CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies
2022-10-07 16:24:42
Metasploit Weekly Wrap-Up
2022-10-21 17:31:54
metasploit
metasploit
Fortinet FortiOS, FortiProxy, and FortiSwitchManager authentication bypass.
2022-10-14 20:19:43
prion
prion
Authentication flaw
2022-10-18 14:15:00
cve
cve
CVE-2022-40684
2022-10-18 14:15:09
nessus
nessus
Fortinet Fortigate Authentication Bypass (FG-IR-22-377)
2022-10-07 00:00:00
cvelist
cvelist
CVE-2022-40684
2022-10-18 00:00:00
exploitdb
exploitdb
FortiOS, FortiProxy, FortiSwitchManager v7.2.1 - Authentication Bypass
2023-03-27 00:00:00
wordfence
wordfence
Threat Advisory: CVE-2022-40684 Fortinet Appliance Auth bypass
2022-10-13 21:08:36
attackerkb
attackerkb
CVE-2022-40684
2022-10-18 00:00:00
qualysblog
qualysblog
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
ics
ics
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.974
Percentile
99.9%
Related for CISA-KEV-CVE-2022-40684