Firetruck

CVE-2022-40684

KEV · Ransomware

Fortinet Multiple Products Authentication Bypass Vulnerability

View CVE record →
Vendor / Project
Fortinet
Product
Multiple Products
Date added
Oct 11, 2022
Due date
Nov 1, 2022
Known ransomware use
Known
CWEs
CWE-288

Description

Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Required action

Apply updates per vendor instructions.

Notes