Exploit / PoCcriticalExploited in the wild

PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks

The Hacker Newsby @TheHackersNewsOct 15, 2022 · 00:00 UTC (Oct 15, 2022)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2022-40684 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-40684 CVE-2018-13379

Tags: cve-2022-40684 cve-2018-13379 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2022-40684	Admin-Interface Auth Bypass in Fortinet FortiOS, FortiProxy & FortiSwitchManager	9.8	100%	KEVRansomwarePoC ×2	Oct 18, 2022 KEV Oct 11, 2022

From the original article

2 min read at thehackernews.com

A proof-of-concept (PoC) exploit code has been made available for the recently disclosed critical security flaw affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager, making it imperative that users move quickly to apply the patches. "FortiOS exposes a management web portal that allows a user to configure the system," Horizon3. ai researcher James Horseman said .

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.