What’s Vulnerable › Vulnerabilities

CVE-2022-40684: Fortinet Multiple Products Authentication Bypass Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-10-11
• EPSS: 100.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-10-18 · updated 2026-08-06
• Weakness: CWE-287

Description

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Affected products

• Fortinet FortiOS (FortiGate): from 7.0.0 before 7.0.7; from 7.2.0 before 7.2.2 — fixed in 7.0.7, 7.2.2
• Fortinet FortiProxy: from 7.0.0 before 7.0.7; 7.2.0 — fixed in 7.0.7
• Fortinet FortiSwitchManager: 7.0.0, 7.2.0

How to fix

Upgrade to a fixed version: Fortinet FortiOS (FortiGate) 7.0.7, 7.2.2; Fortinet FortiProxy 7.0.7. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html
• http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html
• https://fortiguard.com/psirt/FG-IR-22-377
• http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html
• http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html
• https://fortiguard.com/psirt/FG-IR-22-377
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684

Get alerted when CVE-2022-40684 or the next vulnerability affects your stack