CVE-2022-40684—Fortinet Multiple Products Authentication Bypass Vulnerability

漏洞名称

Fortinet Multiple Products Authentication Bypass Vulnerability

描述

Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://www.fortiguard.com/psirt/FG-IR-22-377
• https://nvd.nist.gov/vuln/detail/CVE-2022-40684

相关新闻文章

• New SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksJune 26, 2026
• ⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]January 27, 2025
• 15K Fortinet Device Configs Leaked to the Dark WebJanuary 17, 2025
• Hackers leak configs and VPN credentials for 15,000 FortiGate devicesJanuary 16, 2025

相关 CWE

• CWE-288