What is CVE-2022-40675?

CVE-2022-40675 is a medium-severity vulnerability in Fortinet Fortinac, classified under Cryptographic Issues. CVSS score: 6.0/10. Published 2023-02-16.

How severe is CVE-2022-40675?

Medium severity. CVSS v3 base score is 6.0 out of 10.

Vulnerability in Fortinet Fortinac

CVE-2022-40675

Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decr…

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.003 (54.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:U/RC:C.

Affected products

Fortinet Fortinac — versions 9.4.0, 9.2.0, 9.1.0

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

https://fortiguard.com/psirt/FG-IR-22-312

Frequently asked questions

What is CVE-2022-40675?: CVE-2022-40675 is a medium-severity vulnerability in Fortinet Fortinac, classified under Cryptographic Issues. CVSS score: 6.0/10. Published 2023-02-16.
How severe is CVE-2022-40675?: Medium severity. CVSS v3 base score is 6.0 out of 10.