CVE-2022-40684

This vulnerability is like a locked door where an attacker finds a hidden shortcut into the office—without needing a key (no login). Once inside, they can perform administrative actions on the system over the network, which can lead to control of your security gateway and help attackers disrupt services or steal data.

This matters if your business uses Fortinet FortiOS, FortiProxy, or FortiSwitchManager (including management/administration features) in the affected versions listed by this alert. Because the attacker does not need to log in and the attack happens over the network, exposure is most likely when the administrative interface is reachable from the internet or any untrusted network. Treat it as a risk wherever the vulnerable administrative features can be reached without authentication.

This is RED because real-world exploitation is confirmed in a CISA KEV entry and is reported as used in ransomware campaigns. Attackers can hit the administrative interface from the network without authentication, making it extremely actionable for intrusions.