Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

CVE-2022-40684 flaw in Fortinet products is being exploited in the wild

Security Affairsby @securityaffairs ()1 min read2
Analyze CVE-2022-40684 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-40684
Admin-Interface Auth Bypass in Fortinet FortiOS, FortiProxy & FortiSwitchManager
9.8100%KEVRansomwarePoC ×2
KEV

From the original article

1 min read at securityaffairs.com

Fortinet has confirmed that the recently disclosed critical authentication bypass issue (CVE-2022-40684) is being exploited in the wild. Last week, Fortinet addressed a critical authentication bypass flaw, tracked as CVE-2022-40684 , that impacted FortiGate firewalls and FortiProxy web proxies. An attacker can exploit the vulnerability to log into vulnerable devices.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.