Exploit for Improper Authentication in Fortinet Fortiproxy

githubexploit · 2022-10-14

Description

Vulnerability in Fortinet Fortiproxy for Improper Authentication

Affected software

Fortinet Fortiproxy< 7.0.7, 7.2.0

Fortinet Fortiswitchmanager= 7.0.0, 7.2.0

Fortinet Fortios< 7.0.7, 7.2.2

All known vulnerabilities by product

Fortios Fortiproxy Fortiswitchmanager

CVSS 9.8 for CVE-2022-40684

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

92%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2024-08-12 20:27

Last Seen:2025-08-31 21:27

Reporter:secunnix

Written in:Rust

Last commit:2022-10-14

Tags

exploitCVE-2022-40684fortinet fortiosfortiproxyfortiswitchmanagerrustpoc

Other exploits for CVE-2022-40684

2026-06-24 sankarayougisrivastewar-sudoGITHUB

FortiGate-FortiWeb-Multi-Exploit-Extractor

2026-05-14 1337or420GITHUB

Exploit for Improper Authentication in Fortinet Fortiproxy

2025-11-19 ccordeiroGITHUB

Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass

2025-04-16 ub3rsickEXPLOITDBRuby

Exploit for Improper Authentication in Fortinet Fortiproxy

2023-09-14 Anthony1500GITHUB

FortiOS FortiProxy FortiSwitchManager v7.2.1 - Authentication Bypass Vulnerability

2023-03-27 Felipe AlcantaraZDT

FortiOS_ FortiProxy_ FortiSwitchManager v7.2.1 - Authentication Bypass

2023-03-27 Felipe AlcantaraEXPLOITDB

Fortinet 7.2.1 Authentication Bypass

2023-03-27 Felipe AlcantaraPACKETSTORM

Exploit Code

README6 lines

## https://sploitus.com/exploit?id=A35BD9D8-6888-5724-BF89-A3A7D384D280
# CVE-2022-40684

POC With RUST For CVE-2022-40684 (Fortinet FortiOS, FortiProxy, and FortiSwitchManager)

![Screenshot](ss_rust_2.png)