CVE-2022-40684
Fortinet Multiple Products Authentication Bypass Vulnerability
Published Oct 11, 2022 · updated Aug 5, 2026 · fortinet fortiproxy
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
Timeline
Detection, updates, and resolution for this record.
Oct 11, 2022 · Catalog
Detected
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
Oct 11, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Nov 1, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Aug 5, 2026 · Catalog
Updated
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
Required action
Apply updates per vendor instructions.
CISA due date Nov 1, 2022
Affected
- cpe fortinet/fortiosversion unspecified
- cpe fortinet/fortiproxyversion unspecified
- cpe fortinet/fortiproxy7.2.0
- cpe fortinet/fortiswitchmanager7.0.0
- cpe fortinet/fortiswitchmanager7.2.0
- vendor Fortinet Multiple Productsversion unspecified
Sources
- CISA KEVCVE-2022-40684
Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
cisa.gov - CVE.orgCVE-2022-40684
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-40684
30-day exploitation probability 100.0%
first.org - Exploit Database51092
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database52239
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_linux/http/fortinet_authentication_bypass_cve_2022_40684
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2022-40684
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttack
nvd.nist.gov