CVE-2022-40675

MEDIUM

Fortinet FortiNAC 8.3.7-9.4.1 - Cryptographic Issues

Title source: llm

Description

Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.

References (1)

Core 1

Core References

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-22-312

Scores

CVSS v3 6.5

EPSS 0.0031

EPSS Percentile 54.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-310

Status published

Products (2)

fortinet/fortinac 8.3.7 - 9.2.7

fortinet/fortinac-f < 7.2.0

Published Feb 16, 2023

Tracked Since Feb 18, 2026