Weak Authentication Vulnerability in Fortinet's FortiNAC Product Line

CVE-2022-45860

Summary

A weak authentication vulnerability exists in Fortinet's FortiNAC products, allowing unauthenticated attackers to exploit the device registration page. This flaw can facilitate password spraying attacks, significantly increasing the likelihood of unauthorized access to sensitive systems. Affected versions include FortiNAC-F 7.2.0, FortiNAC 9.4.2 and earlier, as well as various versions in the 9.2, 9.1, 8.8, and 8.7 series. Organizations using these versions are advised to take immediate measures to secure their installations.

References