CVE-2022-40684
CVE-2022-40684: 1 tracked advisory record across Fortinet. CISA KEV listed; exploitation observed. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Fortinet
1 advisory- Advisory severityCritical9.6
Critical [CVE-2022-40684] Fortinet FortiOS, FortiProxy, FortiSwitchManager: authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests
CVE-2022-40684Source published Source updated
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. Affected product named by the advisory: Fortinet FortiOS, FortiProxy, FortiSwitchManager.
- Affected products in this advisory
- FortiOS
- FortiProxy
- FortiSwitchManager
- Source-reported affected versions
- FortiOS: 7.0.0 through 7.2.1 (vendor-listed versions)
- FortiProxy: 7.0.0 through 7.2.0 (vendor-listed versions)
- FortiSwitchManager: 7.0.0 through 7.2.0 (vendor-listed versions)
- Source-reported fixed versions
- FortiOS 7.2: 7.2.2
- FortiOS 7.0: 7.0.7
- FortiProxy 7.2: 7.2.1
- FortiProxy 7.0: 7.0.7
2 more entries in the full advisory.
- Mitigation guidance
- Upgrade per the Affected/Solution table: FortiOS 7.2: 7.2.2; FortiOS 7.0: 7.0.7; FortiProxy 7.2: 7.2.1; FortiProxy 7.0: 7.0.7; FortiSwitchManager 7.2: 7.2.1; ….
Android app · Google Play
Monitor future Fortinet CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.