CVE-2022-40675

Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.

Score

CVSS 3.1 7.4 High

Status

Modified - psirt@fortinet.com

Published

2023-02-16

Last modified

2024-10-23

Weaknesses

CWE-310

Affected products

• Fortinac (Fortinet)
• Fortinac-f (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-312