THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2022-40684 (CRITICAL 9.8) — An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttack

[NVD] CVE-2022-40684 (CRITICAL 9.8) — An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttack

lownvdPublished 2022-10-18

CVE-2022-40684 CVSS: 9.8 CRITICAL Published: 2022-10-18T14:15:09.747

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative int

Indicators of compromise

CVE-2022-40684cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2022-40684