CVE-2022-40684 PoC — Fortinet FortiOS 授权问题漏洞

Source

https://github.com/NeriaBasha/CVE-2022-40684

Associated Vulnerability

Title: Fortinet FortiOS 授权问题漏洞 (CVE-2022-40684)
Description:An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Readme

# CVE-2022-40684

Extract admin users and Fortigate details


## usage: 


##### Single URL:

```
.\poc-cve-2022-40684.ps1 -fgt 192.168.1.1
```


##### Multiple URL's:

```
.\poc-cve-2022-40684.ps1 -urlsfile urls.txt
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →