CVE-2022-40684 PoC — Fortinet FortiOS 授权问题漏洞

Source

https://github.com/ccordeiro/CVE-2022-40684

Associated Vulnerability

Title:Fortinet FortiOS 授权问题漏洞 (CVE-2022-40684)
Description:An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Description

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

Readme

# # CVE-2022-40684 
CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions.

- Run exploit

```
USE: python3 exploit.py https://target.com
Ex: python3 exploit.py https://target.com

```

- Run nuclei template

```
echo https://target.com | nuclei -t CVE-2022-40684.yaml
```

File Snapshot


 [4.0K]  /data/pocs/07d814057fd5f3619dc1242d9c5752c383aaaa2d
├── [1.2K]  CVE-2022-40684.yaml
├── [1.9K]  exploit.py
├── [ 322]  README.md
├── [  71]  update-1763545908-420.txt
├── [  71]  update-1763545912-857.txt
└── [  71]  update-1763545915-110.txt

1 directory, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!