CVE-2022-40684 Fortinet Multiple Products Authentication Bypass
Unauthenticated attackers can bypass authentication to perform administrative operations on Fortinet devices via crafted HTTP requests.
- Exploited in the wild
- Since 11 Oct 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-40684?
CVE-2022-40684 is a critical authentication bypass vulnerability in Fortinet Fortios, published on 18 Oct 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
Weakness: CWE-287
Which versions are affected by CVE-2022-40684?
It affects 3 products.
Products include Fortinet Fortios, Fortinet Fortiproxy, Fortinet Fortiswitchmanager.
How do I fix CVE-2022-40684?
No fix has been published for CVE-2022-40684 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 1 Nov 2022.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-40684 being exploited?
Yes. Attackers have exploited CVE-2022-40684 in the wild since at least 11 Oct 2022, including in ransomware campaigns.
Public exploit code: 1 Metasploit module, 2 Exploit-DB entries, 1 Nuclei template and 31 proofs of concept on GitHub.
Other vulnerabilities in Fortinet Fortios
- CVE-2024-23113 Fortinet Multiple Products Format String
- CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass
- CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write
- CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow
- CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow
Sources
Also known as GHSA-m3wm-rjvf-m778.