H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2022-10-11
Last seen2022-10-11

Confidence

—

Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productFortinet Multiple Products
Added2022-10-11
Due date2022-11-01
3 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2022-40684
open
cwe
CWE-288
open