What is CVE-2022-45858?

CVE-2022-45858 is a medium-severity vulnerability in Fortinet Fortinac, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 4.2/10. Published 2023-05-03.

How severe is CVE-2022-45858?

Medium severity. CVSS v3 base score is 4.2 out of 10.

Vulnerability in Fortinet Fortinac

CVE-2022-45858

A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.002 (10.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N.

Affected products

Fortinet Fortinac — versions 9.4.0, 9.2.0, 9.1.0

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-45858?: CVE-2022-45858 is a medium-severity vulnerability in Fortinet Fortinac, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 4.2/10. Published 2023-05-03.
How severe is CVE-2022-45858?: Medium severity. CVSS v3 base score is 4.2 out of 10.