HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2022-40684: Fortinet - Authentication Bypass

HoneyLabs honeypots recorded 10 probes matching CVE-2022-40684 from 5 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /api/v2/cmdb/system/admin/admin
  • /api/v2/cmdb/system/admin

Addresses probing it

Source IPProbesNetworkCountry
45.56.72.1422Akamai Connected CloudUnited States
45.79.2.1832Akamai Connected CloudUnited States
143.244.148.1322DigitalOcean, LLCUnited States
45.79.218.2442Akamai Connected CloudUnited States
96.126.108.1462Akamai Connected CloudUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS63949Akamai Connected Cloud84
AS14061DigitalOcean, LLC21

Captured requests

  • /api/v2/cmdb/system/admin
  • /api/v2/cmdb/system/admin/admin

HTTP client fingerprints (JA4H)

  • ge11nn0300_dedeb29cc523

CVE report

CVE report

Open a specific CVE from the CVE tracker.