Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

Attackers target govt networks exploiting Fortinet SSL-VPN CVE-2022

Security Affairsby @securityaffairs ()3 min read1 · 1 read
Read at securityaffairs.com
Analyze CVE-2022-42475 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2022-42475
Tags
cve-2022-42475exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-42475
Unauthenticated Heap Overflow in Fortinet FortiOS/FortiProxy SSL-VPN (Critical RCE)
9.899%KEVRansomwarePoC
KEV

From the original article

3 min read at securityaffairs.com

Recently patched Fortinet FortiOS SSL-VPN zero-day exploited in attacks against government organizations and government-related targets. Fortinet researchers reported how threat actors exploited the recently patched FortiOS SSL-VPN vulnerability ( CVE-2022-42475 ) in attacks against government organizations and government-related targets.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.