Lucene search

[email protected]CVE-2022-29054

HistoryFeb 16, 2023 - 7:15 p.m.

CVE-2022-29054

2023-02-1619:15:12

CWE-329

[email protected]

web.nvd.nist.gov

cve-2022-29054

fortinet

fortios

vulnerability

cwe-325

encryption

dhcp

dns

nvd

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.9, 6.2.x and 6.0.x may allow an attacker in possession of the encrypted key to decipher it.

Affected configurations

NVD

Node

fortinetfortiproxyRange1.1.0–1.1.6

fortinetfortiproxyRange1.2.0–1.2.13

fortinetfortiproxyRange2.0.0–2.0.11

fortinetfortiproxyRange7.0.0–7.0.8

fortinetfortiproxyMatch7.2.0

fortinetfortiproxyMatch7.2.1

fortinetfortiosRange6.0.0–6.0.16

fortinetfortiosRange6.2.0–6.2.12

fortinetfortiosRange6.4.0–6.4.11

fortinetfortiosRange7.0.0–7.0.8

fortinetfortiosMatch7.2.0

CPENameOperatorVersion
fortinet:fortiproxyfortinet fortiproxyle1.1.6
fortinet:fortiproxyfortinet fortiproxyle1.2.13
fortinet:fortiproxyfortinet fortiproxyle2.0.11
fortinet:fortiproxyfortinet fortiproxylt7.0.8
fortinet:fortiproxyfortinet fortiproxyeq7.2.0
fortinet:fortiproxyfortinet fortiproxyeq7.2.1
fortinet:fortiosfortinet fortiosle6.0.16
fortinet:fortiosfortinet fortiosle6.2.12
fortinet:fortiosfortinet fortiosle6.4.11
fortinet:fortiosfortinet fortioslt7.0.8

CPE	Name	Operator	Version
fortinet:fortiproxy	fortinet fortiproxy	le	1.1.6
fortinet:fortiproxy	fortinet fortiproxy	le	1.2.13
fortinet:fortiproxy	fortinet fortiproxy	le	2.0.11
fortinet:fortiproxy	fortinet fortiproxy	lt	7.0.8
fortinet:fortiproxy	fortinet fortiproxy	eq	7.2.0
fortinet:fortiproxy	fortinet fortiproxy	eq	7.2.1
fortinet:fortios	fortinet fortios	le	6.0.16
fortinet:fortios	fortinet fortios	le	6.2.12
fortinet:fortios	fortinet fortios	le	6.4.11
fortinet:fortios	fortinet fortios	lt	7.0.8

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiOS",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.2.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.9",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.12",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.16",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fortinet",
    "product": "FortiProxy",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "2.0.0",
        "lessThanOrEqual": "2.0.11",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "1.2.0",
        "lessThanOrEqual": "1.2.13",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "1.1.0",
        "lessThanOrEqual": "1.1.6",
        "status": "affected"
      }
    ]
  }
]