CVE-2022-40675

7.4 highEPSS 0.4%

High (7.4) in fortinet. EPSS 0.4% chance of exploitation in the next 30 days.

Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2023-02-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortinac
fortinet:fortinac-f

References

https://fortiguard.com/psirt/FG-IR-22-312
https://fortiguard.com/psirt/FG-IR-22-312

Check your stack JSON