CVE-2022-40684 - An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests

Back Back to CVE browser

CRITICAL KEV

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests

Published Oct 18, 2022 ·Due Nov 1, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 99.98%

Description

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Affected products

Vendor Fortinet Product Fortinet FortiOS, FortiProxy, FortiSwitchManager Default
unknown
Affected
- FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Fortinet	Fortinet FortiOS, FortiProxy, FortiSwitchManager	unknown	Affected FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (5)

http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html
ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html
ExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43955
Advisory
https://fortiguard.com/psirt/FG-IR-22-377
MitigationVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684
government-resourceUS Government Resource

Link	Providers	Tags
http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html		ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html		ExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43955		Advisory
https://fortiguard.com/psirt/FG-IR-22-377		MitigationVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684		government-resourceUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner fortinet

Published Oct 18, 2022

Updated Aug 6, 2026

Reserved Sep 14, 2022

Link CVE-2022-40684

CISA Vulnrichment

Updated Oct 23, 2024

NVD

Status Analyzed

Modified Aug 6, 2026

Link CVE-2022-40684

Red Hat

No data

ENISA EUVD

Assigner fortinet

Published Oct 18, 2022

Updated Aug 6, 2026

Exploited since Oct 11, 2022

Link EUVD-2022-43955

GitHub

No data