critical9.8Known exploitedPublic exploit code
CVE-2022-40684
Fortinet Multiple Products Authentication Bypass Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-10-11. Federal due date: 2022-11-01.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass2025-04-16 · remote · windows
- FortiOS_ FortiProxy_ FortiSwitchManager v7.2.1 - Authentication Bypass2023-03-27 · webapps · multiple
Impact
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiproxy | from 7.0.0 before 7.0.7 Version 7.2.0 |
| Fortinet | Fortiswitchmanager | Versions 7.0.0, 7.2.0 |
| Fortinet | Fortios | from 7.0.0 before 7.0.7 from 7.2.0 before 7.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html
- http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html
- https://fortiguard.com/psirt/FG-IR-22-377
- http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html
- http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html
- https://fortiguard.com/psirt/FG-IR-22-377
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684