CVSS: 8.1EPSS: 0%CPEs: 3EXPL: 0CVE-2022-30307
https://notcve.org/view.php?id=CVE-2022-30307
A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack. Una vulnerabilidad de error de administración de claves [CWE-320] que afecta la clave de host RSA SSH en FortiOS 7.2.0 y versiones anteriores, 7.0.6 y versiones anteriores, 6.4.9 y versiones anteriores puede permitir que un atacante no autenticado realice un ataque de hombre en el medio. • https://fortiguard.com/psirt/FG-IR-22-228 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-35842
https://notcve.org/view.php?id=CVE-2022-35842
An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS. Una exposición de información sensible a una vulnerabilidad de un actor no autorizado [CWE-200] en FortiOS SSL-VPN versiones 7.2.0, versiones 7.0.0 a 7.0.6 y versiones 6.4.0 a 6.4.9 puede permitir que un atacante remoto no autenticado obtenga información sobre las configuraciones LDAP y SAML configuradas en FortiOS. • https://fortiguard.com/psirt/FG-IR-22-223 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2022-38380
https://notcve.org/view.php?id=CVE-2022-38380
An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to modify the interface settings via the API. Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiOS versión 7.2.0 y versiones 7.0.0 a 7.0.7 puede permitir que un usuario remoto de solo lectura autenticado modifique la configuración de la interfaz a través de la API. • https://fortiguard.com/psirt/FG-IR-22-174 •
CVSS: 9.8EPSS: 97%CPEs: 6EXPL: 23CVE-2022-40684 – Fortinet Multiple Products Authentication Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2022-40684
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. Una omisión de autenticación usando una ruta o canal alternativo [CWE-288] en Fortinet FortiOS versión versiones 7.2.0 hasta 7.2.1 y 7.0.0 hasta 7.0.6, FortiProxy versión 7.2.0 y versiones 7.0.0 hasta 7.0.6 y FortiSwitchManager versión 7.2.0 y 7.0.0, permite a un atacante no autenticado llevar a cabo operaciones en la interfaz administrativa por medio de peticiones HTTP o HTTPS especialmente diseñadas Fortinet FortiOS, FortiProxy, and FortiSwitchManager version 7.2.1 suffers from a authentication bypass vulnerability. Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. • https://www.exploit-db.com/exploits/51092 https://github.com/horizon3ai/CVE-2022-40684 https://github.com/carlosevieira/CVE-2022-40684 https://github.com/HAWA771/CVE-2022-40684 https://github.com/hughink/CVE-2022-40684 https://github.com/secunnix/CVE-2022-40684 https://github.com/kljunowsky/CVE-2022-40684-POC https://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner https://github.com/mohamedbenchikh/CVE-2022-40684 https://github.com/qingsiweisan/CVE-2022-40684 https:&#x • CWE-287: Improper Authentication •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2022-29055
https://notcve.org/view.php?id=CVE-2022-29055
A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via an HTTP GET request. Un acceso de puntero no inicializado en Fortinet FortiOS versión 7.2.0, 7.0.0 hasta 7.0.5, 6.4.0 hasta 6.4.8, 6.2.0 hasta 6.2.10, 6.0.x, FortiProxy versión 7. 0.0 hasta 7.0.4, 2.0.0 hasta 2.0.9, 1.2.x permite a un atacante remoto no autenticado o autenticado bloquear el demonio sslvpn por medio de una petición HTTP GET • https://fortiguard.com/psirt/FG-IR-22-086 • CWE-824: Access of Uninitialized Pointer •