PoC exploit, IoCs for Fortinet FortiNAC RCE released (CVE-2022-39952)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-39952 | A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through… | 9.8 | 100% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | horizon3.ai | the attacker,” shared Zach Hanley, Chief Attack Engineer at Horizon3.ai. “We first create a zip that contains a file and specify th |
From the original article
1 min read at helpnetsecurity.com
Horizon3. ai’s Attack Team has released a PoC exploit for CVE-2022-39952 , a critical vulnerability affecting FortiNAC, Fortinet’s network access control solution. “Similar to the weaponization of previous archive vulnerability issues that allow arbitrary file write, we use this vulnerability to write a cron job to /etc/cron.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.