CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects Fortinet. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-38375
Severity
CRITICAL
CVSS
9.1
EPSS
1.08%
Fortinet
Original NVD Description
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.
Related CVEs
Other vulnerabilities affecting the same vendor(s)