Fortinet Multiple Products Authentication Bypass Vulnerability — CVE-2022-40684
CISA KEV · Fortinet · CVE-2022-40684
ID
CVE-2022-40684
CVE-2022-40684
Date
Activity
Source
CISA KEV
CISA KEV
Vendor
Fortinet
Fortinet
Threat
critical
critical
EPSS
0.94427
0.94427
Exploited
Yes
Yes
Summary
CVE-2022-40684 is a advisory from CISA KEV. Fortinet Multiple Products Authentication Bypass Vulnerability Vendor: Fortinet. Severity/Threat: critical. This item is marked as actively exploited.
Product
Multiple Products
What to do
General, cautious steps (verify details in the official source):
- Prioritize patching or mitigation immediately (treat as actively risky).
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Check logs/telemetry for indicators of compromise and suspicious activity.
- Consider temporary hardening: restrict access, reduce attack surface, and monitor aggressively.
- Read the official advisory for exact affected versions and remediation steps.