VYPR
← All advisories
Medium severity5.3NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026

CVE-2022-45860

CVE-2022-45860

Description

A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in device registration page may allow an unauthenticated attacker to perform password spraying attacks with an increased chance of success.

Affected products

4
  • Fortinet/Fortinac F3 versions
    cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0
    • (no CPE)range: 9.4.0
  • Fortinet/Fortinac
    cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
    Range: >=8.7.0,<=9.2.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.