imPC@ndo IT

Tracker / CVE-2022-30307

CVE-2022-30307

Low 3.9

A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack.

Affected products and versions

fortinet fortios · 6.4.0 → 6.4.10
fortinet fortios · 7.0.1 → 7.0.8
fortinet fortios · 7.2.0 → 7.2.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References