CVE-2022-41328
Fortinet FortiOS Path Traversal Vulnerability
CVSS
—
Sem CVSS
EPSS
10.7%
p96
KEV
SIM
14 de mar. de 2023
Exploit Today
79
0-100
Publicado: — · Última mod.: —
10.7%EPSS · 30 dias10.7%
2026-10-082026-11-05
Produto
Fortinet / FortiOS
Vulnerabilidade
Fortinet FortiOS Path Traversal Vulnerability
Adicionado ao KEV
14 de mar. de 2023
Corrigir até
4 de abr. de 2023
Uso conhecido em ransomware
Não
Descrição resumida
Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.
Ação necessária
Apply updates per vendor instructions.
Notas
https://www.fortiguard.com/psirt/FG-IR-22-369; https://nvd.nist.gov/vuln/detail/CVE-2022-41328
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2025-686865.9 MÉD98.2%
KEV—79Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability101dCVE-2024-217629.8 CRÍ99.7%
KEV—80Fortinet FortiOS Out-of-Bound Write Vulnerability14dCVE-2019-55916.5 MÉD97.3%
KEV—79Fortinet FortiOS Default Configuration Vulnerability83dCVE-2020-128129.8 CRÍ98.8%
KEV—80Fortinet FortiOS SSL VPN Improper Authentication Vulnerability34dCVE-2019-66936.5 MÉD93.9%
KEV—78Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability94dCVE-2018-13379—100.0%
KEV—80Fortinet FortiOS SSL VPN Path Traversal Vulnerability—