8.1
High
CVE-2022-35846 An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0…
Description
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiTester | Versions not published |
Other CVEs of Fortinet FortiTester
The 8 CVEs of Fortinet FortiTester →
CVE-2022-33870
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line…
7.8
High
CVE-2022-38372
A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0…
6.7
Medium
CVE-2022-33872
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
9.8
Critical
CVE-2022-33873
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
6.8
Medium