CVE-2022-40684: Fortinet Multiple Products Authentication Bypass Vulnerability
Vulnerability summary
CVE-2022-40684 is a critical (CVSS 9.8) Improper Authentication vulnerability in Fortinet Multiple Products. It is known to be exploited: CISA lists it, first on 11-10-2022. It has been used in ransomware campaigns. EPSS estimates a 99.98% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 5 public exploits are recorded.
Timeline
- 11-10-2022Added to CISA KEVFortinet Multiple Products Authentication Bypass Vulnerability
- 18-10-2022PublishedVulnerability first disclosed.
- 01-11-2022CISA remediation dueApply updates per vendor instructions.
- 06-08-2026Last modifiedVulnerability information updated.
Description
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
99.98%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 99.98% on 19-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 11-10-2022
- Federal due date
- 01-11-2022
CISA required action
Apply updates per vendor instructions. www.fortiguard.com/psirt/FG-IR-22-377 nvd.nist.gov/vuln/detail/CVE-2022-40684
Public exploits
5 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
FortiOS_ FortiProxy_ FortiSwitchManager v7.2.1 - Authentication Bypass
Maturity: poc
Show all 5 exploits
Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass
Maturity: poc
Fortinet FortiOS, FortiProxy, and FortiSwitchManager authentication bypass.
exploit/linux/http/fortinet_authentication_bypass_cve_2022_40684
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Fortinet4 products
- fortinet fortios, fortiproxy, fortiswitchmanagerFortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0
- fortios≥ 7.0.0, < 7.0.7 | ≥ 7.2.0, < 7.2.2
- fortiproxy≥ 7.0.0, < 7.0.7 | 7.2.0
- fortiswitchmanager7.0.0 | 7.2.0
1 vendor · 4 products
References
4 links- packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.htmlExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684Government ResourceUS Government Resource