PT-2023-14785 · Fortinet · Fortinac

Published 2023-05-03 · Updated 2023-05-11 · CVE-2022-45858

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions FortiNAC versions 9.4.1 and below FortiNAC versions 9.2.6 and below FortiNAC versions 9.1.0 and below FortiNAC versions 8.8.0 and below FortiNAC versions 8.7.0 and below

Description A use of a weak cryptographic algorithm vulnerability in FortiNAC may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks.

Recommendations For FortiNAC versions 9.4.1 and below, consider updating to a version that uses a stronger cryptographic algorithm. For FortiNAC versions 9.2.6 and below, consider updating to a version that uses a stronger cryptographic algorithm. For FortiNAC versions 9.1.0 and below, consider updating to a version that uses a stronger cryptographic algorithm. For FortiNAC versions 8.8.0 and below, consider updating to a version that uses a stronger cryptographic algorithm. For FortiNAC versions 8.7.0 and below, consider updating to a version that uses a stronger cryptographic algorithm.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2022-45858

Affected Products

Fortinac

References · 5

• https://fortiguard.com/psirt/FG-IR-22-452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45858 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45858 · Vendor Advisory
• https://t.me/cibsecurity/63264 · Telegram Post
• https://t.me/cvenotify/49779 · Telegram Post