Exploit / PoCcriticalExploited in the wild

Fortinet Warns of Active Exploitation of New SSL-VPN Pre

The Hacker Newsby @TheHackersNewsDec 15, 2022 · 00:00 UTC (Dec 15, 2022)1 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2022-42475 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-42475 CVE-2022-40684

Tags: cve-2022-42475 cve-2022-40684 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-40684	Admin-Interface Auth Bypass in Fortinet FortiOS, FortiProxy & FortiSwitchManager	9.8	100%	KEVRansomwarePoC ×2	Oct 18, 2022 KEV Oct 11, 2022
CVE-2022-42475	Unauthenticated Heap Overflow in Fortinet FortiOS/FortiProxy SSL-VPN (Critical RCE)	9.8	99%	KEVRansomwarePoC	Jan 2, 2023 KEV Dec 13, 2022

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Dec 13, 2022 Virtual Private Network / Network Security Fortinet on Monday issued emergency patches for a severe security flaw affecting its FortiOS SSL-VPN product that it said is being actively exploited in the wild. Tracked as CVE-2022-42475 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.