CVE-2022-40684

Related Files

Fortinet 7.2.1 Authentication Bypass

Posted Mar 27, 2023

Authored by Felipe Alcantara

Fortinet FortiOS, FortiProxy, and FortiSwitchManager version 7.2.1 suffers from a authentication bypass vulnerability.

tags | exploit, bypass

advisories | CVE-2022-40684

SHA-256 | 247c4cd746e2d193aec6a0770d24f595612937237ffa172a1a0806142b367e8a

Download | Favorite | View

Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass

Posted Oct 19, 2022

Authored by Heyder Andrade, Zach Hanley | Site metasploit.com

This Metasploit module exploits an authentication bypass vulnerability in the Fortinet FortiOS, FortiProxy, and FortiSwitchManager API to gain access to a chosen account and then adds an SSH key to the authorized_keys file of the chosen account, allowing you to login to the system with the chosen account. Successful exploitation results in remote code execution.

tags | exploit, remote, code execution, bypass

advisories | CVE-2022-40684

SHA-256 | 818eeb4d404c8cde2ab69451948a6037ca08bef60e2be65eb6fe9ed9d7ef0e7d

Download | Favorite | View