NetSight
high8.1

CVE-2022-35846

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0…

Impact

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack.

Affected products

VendorProductAffected versions
FortinetFortitester
from 2.3.0 before 3.9.2
from 4.0.0 before 4.2.1
from 7.0.0 before 7.1.1

Weakness classification

References