CVEvulnerability
CVE-2022-40675
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-310
Description
Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.
Affected configurations
• fortinet fortinac (>= 8.3.7 <= 9.2.7)
• fortinet fortinac (>= 9.4.0 < 9.4.2)
• fortinet fortinac-f (< 7.2.0)
Related
Weakness · not in database (1)
References
- https://fortiguard.com/psirt/FG-IR-22-312 Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-22-312 Vendor Advisory