3.3

CVE-2022-29053

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an attacker in possession of the encrypted file to decipher it.

Data is provided by the National Vulnerability Database (NVD)
Fortinet ≫ Fortios Version >= 6.0.0 <= 6.0.14
Fortinet ≫ Fortios Version >= 6.2.0 <= 6.2.11
Fortinet ≫ Fortios Version >= 6.4.0 <= 6.4.9
Fortinet ≫ Fortios Version >= 7.0.0 < 7.0.6
Fortinet ≫ Fortios Version7.2.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.302
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
psirt@fortinet.com 2.3 0.8 1.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N