Sploitus

CVE-2022-40684

24 known exploits for CVE-2022-40684

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Affected products
Fortios, Fortiproxy, Fortiswitchmanager
Fortinet Fortiproxy
< 7.0.7, 7.2.0
Fortinet Fortiswitchmanager
= 7.0.0, 7.2.0
Fortinet Fortios
< 7.0.7, 7.2.2
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
100.0% (100th percentile)
Weakness
CWE-287
NVD status
Analyzed
Published
2022-10-18
CVE-2022-40684 at NVD
Authoritative description, scoring and affected products

24 known exploits for CVE-2022-40684

Proof-of-concept code and exploit modules indexed by Sploitus

MCATester
2026-06-24 sankarayougisrivastewar-sudoGITHUB
FortiGate-FortiWeb-Multi-Exploit-Extractor
2026-05-14 1337or420GITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2025-11-19 ccordeiroGITHUB
Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass
2025-04-16 ub3rsickEXPLOITDBRuby
Exploit for Improper Authentication in Fortinet Fortiproxy
2023-09-14 Anthony1500GITHUB
FortiOS FortiProxy FortiSwitchManager v7.2.1 - Authentication Bypass Vulnerability
2023-03-27 Felipe AlcantaraZDT
FortiOS_ FortiProxy_ FortiSwitchManager v7.2.1 - Authentication Bypass
2023-03-27 Felipe AlcantaraEXPLOITDB
Fortinet 7.2.1 Authentication Bypass
2023-03-27 Felipe AlcantaraPACKETSTORM
Exploit for Improper Authentication in Fortinet Fortiproxy
2023-02-27 z-boolGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-27 TaroballzChenGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-26 qingsiweisanGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-21 BendalledjGITHUB
Fortinet FortiOS, FortiProxy, and FortiSwitchManager authentication bypass.
2022-10-19 Heyder Andrade <@HeyderAndrade>, Zach Hanley <@hacks_zach>METASPLOITRuby
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass Exploit
2022-10-19 metasploitZDTRuby
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass
2022-10-19 Heyder Andrade, Zach Hanley, metasploit.comPACKETSTORMRuby
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-17 puckiestyleGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-16 NeriaBashaGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-15 ChocapikkGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-14 secunnixGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-14 ivereskGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-13 horizon3aiGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-13 carlosevieiraGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-13 FiliplainGITHUB
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-13 kljunowskyGITHUB