CVE-2022-35846

published 2022-10-18

CVE-2022-35846: An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0…

Priority P2 63 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinet_fortitester	—	—
fortinet	fortitester	—	—
fortinet	fortitester	>= 2.3.0 < 3.9.2	3.9.2
fortinet	fortitester	>= 4.0.0 < 4.2.1	4.2.1
fortinet	fortitester	>= 7.0.0 < 7.1.1	7.1.1

Detection & IOCs extracted from sources · hover to see the quote

• → Monitor for excessive authentication attempts against the FortiTester Telnet port, which may indicate a brute force attack targeting admin credentials ↗
• → Focus detection on the Telnet port of FortiTester devices running versions 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, or 7.0.0 through 7.1.0 ↗

• · The vulnerability is specific to the Telnet port on FortiTester; no rate-limiting or lockout mechanism is enforced, enabling unlimited brute force attempts against the admin account ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-307