CVE-2022-45858

MEDIUM

FortiNAC 8.7.0-9.4.1 - Use of a Weak Cryptographic Algorithm

Title source: llm
STIX 2.1

Description

A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks.

References (1)

Core 1
Core References

Scores

CVSS v3 4.2
EPSS 0.0015
EPSS Percentile 35.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-327
Status published
Products (1)
fortinet/fortinac 8.7.0 - 9.1.0
Published May 03, 2023
Tracked Since Feb 18, 2026