Summary
Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
- Vendor
- Fortinet
- Product
- Multiple Products
- Added to KEV
- Oct 11, 2022
- Remediation due
- Nov 1, 2022 (US federal deadline)
- Ransomware use
- Known
- Weakness
- CWE-288
- EPSS
- 100.0% as of Nov 10
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References