CVE-2022-45858: Weak Encryption
Published May 3, 2023
·Updated
A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks.
Affected Software
3 affected components
Fortinet FortiNAC>=8.7.0<9.1.0
Fortinet FortiNAC>=9.2.0<9.2.6
Fortinet FortiNAC>=9.4.0<9.4.2
Remediation
Information
Please upgrade to FortiNAC-F version 7.2.1 or above
Please upgrade to FortiNAC version 9.4.2 or above
Please upgrade to FortiNAC version 9.2.7 or above
Event History
May 3, 2023
CVE Published
via MITRE·09:26 PM
Data Sourced
via MITRE·09:26 PM
RemedyDescriptionSeverityWeakness
Data Sourced
10:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2022-45858.
2
What is the severity of CVE-2022-45858?
The severity of CVE-2022-45858 is high with a score of 7.4.
3
What is the CWE ID associated with CVE-2022-45858?
The CWE ID associated with CVE-2022-45858 is CWE-327.
4
Which versions of FortiNAC are affected by this vulnerability?
FortiNAC versions 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, and 8.7.0 all versions are affected.
5
How does CVE-2022-45858 impact the software?
CVE-2022-45858 may increase the chances of an attacker having access to sensitive information or performing man-in-the-middle attacks.