{"id":"CVE-2022-40675","aliases":["EUVD-2022-43946","GHSA-66q7-rr79-fw65"],"status":"published","title":"Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7,...","description":"Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:U/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00385,"percentile":0.3304,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-310","CWE-327"],"published":"2023-02-16T18:06:52Z","modified":"2026-06-17T05:01:49Z","products":[{"vendor":"fortinet","product":"fortinac"},{"vendor":"fortinet","product":"fortinac-f"}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-312","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40675"},{"url":"https://github.com/advisories/GHSA-66q7-rr79-fw65"}],"sources":{"cve":[{"id":"CVE-2022-40675","description":"Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.","status":"published","published":"2023-02-16T18:06:52.567Z","modified":"2024-10-23T14:32:50.215Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:U/RC:C","level":"medium","assessor":"cna"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:34:30.493103Z"}],"euvd":[{"id":"EUVD-2022-43946","description":"Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.","status":"published","published":"2023-02-16T18:06:52Z","modified":"2024-10-23T14:32:50Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:U/RC:C","level":"medium"}],"updated_at":"2026-11-03T00:05:21.424716Z"}],"ghsa":[{"id":"GHSA-66q7-rr79-fw65","title":"Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7,...","description":"Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.","status":"published","published":"2023-02-16T21:30:27Z","modified":"2023-03-04T05:08:16Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:54:16.644116Z"}],"nvd":[{"id":"CVE-2022-40675","description":"Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.","status":"published","published":"2023-02-16T19:15:13.187Z","modified":"2026-06-17T05:01:49.163Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:07:36.026349Z"}]}}