CRITICALCVSS 9.8KNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2022-40684

CVE-2022-40684 updated by NVD

Published: 2022-10-11
Modified: 2026-09-21
Sources: cisa-kev, nvd

Summary

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-40684

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.