CVE-2022-40678

7.8 highEPSS 0.1%

High (7.8) in fortinet fortinac. EPSS 0.1% chance of exploitation in the next 30 days.

An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow a local attacker with database access to recover user passwords.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2023-02-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortinac

References

https://fortiguard.com/psirt/FG-IR-22-265
https://fortiguard.com/psirt/FG-IR-22-265

Check your stack JSON