Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 11/10/2022, correctif exigé avant le 01/11/2022 pour les agences fédérales américaines.

Action requise : Apply updates per vendor instructions.

Description officielle (NVD)

Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Preuves de concept publiques (31)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

horizon3ai/CVE-2022-40684 · ★ 359 · 13/10/2022
A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
carlosevieira/CVE-2022-40684 · ★ 87 · 13/10/2022
PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)
arsolutioner/fortigate-belsen-leak · ★ 87 · 16/01/2025
Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group
Filiplain/Fortinet-PoC-Auth-Bypass · ★ 16 · 13/10/2022
Bash PoC for Fortinet Auth Bypass - CVE-2022-40684
kljunowsky/CVE-2022-40684-POC · ★ 16 · 13/10/2022
Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
TaroballzChen/CVE-2022-40684-metasploit-scanner · ★ 14 · 27/10/2022
An authentication bypass using an alternate path or channel in Fortinet product
hughink/CVE-2022-40684 · ★ 11 · 28/10/2022
qingsiweisan/CVE-2022-40684 · ★ 9 · 26/10/2022
Chocapikk/CVE-2022-40684 · ★ 7 · 15/10/2022
Fortinet Critical Authentication Bypass Vulnerability (CVE-2022-40684) [ Mass Exploit ]
secunnix/CVE-2022-40684 · ★ 5 · 14/10/2022