cvedb.io
CVE-2022-35846
HIGH · CVSS 8.1
EPSS exploitation probability: 0%
Published 2022-10-18T14:15:09.663 · Last modified 2026-06-17T04:52:23.997

Summary

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack.

Affected products

fortinet — fortitester

Does this affect you?

Add your gear to cvedb and we'll alert you only when fortinet ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.