IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
9.8Critical KEV Used in ransomware

CVE-2022-40684Fortinet Multiple Products Authentication Bypass Vulnerability

Fortinet Fortinet FortiOS, FortiProxy, FortiSwitchManager Published: (4 years ago)

Known exploited — Fortinet Multiple Products Authentication Bypass Vulnerability

CISA confirmed this vulnerability is used in real attacks on 11.10.2022. Remediation deadline for US federal agencies: 01.11.2022.

Required action: Apply updates per vendor instructions. https://www.fortiguard.com/psirt/FG-IR-22-377; https://nvd.nist.gov/vuln/detail/CVE-2022-40684

Description

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Weakness (CWE): CWE-287

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Fortinet Fortinet FortiOS, FortiProxy, FortiSwitchManager FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0
fortinet fortios 7.0.0 – < 7.0.7
fortinet fortiproxy 7.0.0 – < 7.0.7
fortinet fortiswitchmanager 7.0.0

References and patches

CPE matches (NVD) (6)
  • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.7
  • cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.7
  • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.2.0 < 7.2.2

Recent CVEs in the same product — Fortinet (all products)

9.0Critical
CVE-2026-126261
Fortinet FortiManager

A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or c…

7.3High
CVE-2025-61625
Fortinet FortiManager; Fortinet FortiAnalyzer; Fortinet FortiManager Cloud

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManage…

7.9High
CVE-2026-26248
Fortinet FortiSandbox; Fortinet FortiSandbox Cloud; Fortinet FortiSandbox PaaS

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSa…

5.9Medium
CVE-2026-121530
Fortinet FortiOS

A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password

6.7Medium
CVE-2026-106174
Fortinet FortiOS; Siemens RUGGEDCOM APE1808

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

9.6Critical
CVE-2026-107656
Fortinet FortiSandbox; Fortinet FortiSandbox PaaS

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions,…