HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2022-40684: Fortinet - Authentication Bypass

HoneyLabs honeypots recorded 22 probes matching CVE-2022-40684 from 11 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /api/v2/cmdb/system/admin/admin
  • /api/v2/cmdb/system/admin

Addresses probing it

Source IPProbesNetworkCountry
45.56.72.1422Akamai Connected CloudUnited States
138.197.221.542DigitalOcean, LLCUnited States
192.241.136.1622DigitalOcean, LLCUnited States
185.3.95.772Akamai Connected CloudUnited Kingdom
137.184.76.522DigitalOcean, LLCUnited States
143.244.148.1322DigitalOcean, LLCUnited States
104.200.20.2442Akamai Connected CloudUnited States
138.197.173.1372DigitalOcean, LLCCanada

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC147
AS63949Akamai Connected Cloud84

Captured requests

  • /api/v2/cmdb/system/admin
  • /api/v2/cmdb/system/admin/admin

HTTP client fingerprints (JA4H)

  • ge11nn0300_dedeb29cc523

CVE report

CVE report

Open a specific CVE from the CVE tracker.