Researchers release PoC for Fortinet firewall flaw, exploitation attempts mount
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-40684 | Admin-Interface Auth Bypass in Fortinet FortiOS, FortiProxy & FortiSwitchManager | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | horizon3.ai | oted, exploitation attempts have begun surfacing. Fortinet, Horizon3.ai and Wordfence have provided indicators of compromise for th |
From the original article
1 min read at helpnetsecurity.com
Horizon3. ai researchers have released a PoC exploit for CVE-2022-40684 , the authentication bypass vulnerability affecting Fortinet ‘s firewalls and secure web gateways, and soon after exploitation attempts started rising.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.