VulnerabilitycriticalExploited in the wild

CISA adds Fortinet bug to exploited vulnerabilities list

The RecordJan 10, 2023 · 00:00 UTC (Jan 10, 2023)3 min read2 · 1 read

Read at therecord.media

Analyze CVE-2022-40684 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-40684 CVE-2018-13379

Tags: cve-2022-40684 cve-2018-13379 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2022-40684	Admin-Interface Auth Bypass in Fortinet FortiOS, FortiProxy & FortiSwitchManager	9.8	100%	KEVRansomwarePoC ×2	Oct 18, 2022 KEV Oct 11, 2022

From the original article

3 min read at therecord.media

The Cybersecurity and Infrastructure Security Agency (CISA) added a recently discovered vulnerability in Fortinet appliances to its catalog of known exploited issues on Tuesday. CISA said federal civilian agencies have until November 1 to address CVE-2022-40684 — a vulnerability affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.