---
id: 9231
title: "[CVE-2022-40684] Fortigate - Authentication Bypass Lead to Full Device Takeover"
cve: CVE-2022-40684
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/fortigate-authentication-bypass/"
published_at: "2022-11-07T21:00:00Z"
tags: ["vulnerability-research", "research", "auth-bypass"]
phying_url: "https://phying.com/item/9231"
lang: en
---

# [CVE-2022-40684] Fortigate - Authentication Bypass Lead to Full Device Takeover

## Summary

1Day vulnerability research by Hakai – Research Team This post is about the journey to create a Proof-of-concept about CVE-2022-40684, this vulnerability has been assigned by Fortinet as an authentication bypass using an alternate path or channel vulnerability [CWE-288]. Timeline 07/10/2022 – First news about the vulnerability, on 10/07/2022 Gi7w0rm tweeted that Fortinet was […]

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2022-40684
- **Published:** 2022-11-07T21:00:00Z
- **Original:** https://yokai.hakaisecurity.io/fortigate-authentication-bypass/
- **Phying News:** https://phying.com/item/9231