Exploit / PoCcriticalExploited in the wild

Fortinet Warns of Active Exploitation of Newly Discovered Critical Auth Bypass Bug

The Hacker Newsby @TheHackersNewsOct 12, 2022 · 13:16 UTC (Oct 12, 2022)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2022-40684 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-40684 CVE-2018-13379

Tags: cve-2022-40684 cve-2018-13379 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2022-40684	Admin-Interface Auth Bypass in Fortinet FortiOS, FortiProxy & FortiSwitchManager	9.8	100%	KEVRansomwarePoC ×2	Oct 18, 2022 KEV Oct 11, 2022

From the original article

2 min read at thehackernews.com

Fortinet on Monday revealed that the newly patched critical security vulnerability impacting its firewall and proxy products is being actively exploited in the wild. Tracked as CVE-2022-40684 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.