Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

🗓️ 30 Oct 2024 12:00:00Reported by CISAType

cisa🔗 www.cisa.gov👁 22 Views

Fortinet enhances guidance on critical FortiManager vulnerability and advises on mitigating actions.

Reporter	Title	Published	Views	Family All 37
zdt	Fortinet FortiManager Unauthenticated Remote Code Execution Exploit	3 Dec 202400:00	–	zdt
GithubExploit	Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager	22 Nov 202403:13	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager	7 Nov 202421:03	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager	15 Nov 202403:43	–	githubexploit
ATTACKERKB	CVE-2024-47575	23 Oct 202400:00	–	attackerkb
Information Security Automation	About Remote Code Execution – FortiManager “FortiJump” (CVE-2024-47575) vulnerability	19 Nov 202421:26	–	avleonov
Information Security Automation	New episode “In The Trend of VM” (#10): 8 trending vulnerabilities of November, zero budget VM and who should look for patches	2 Jan 202519:34	–	avleonov
BDU FSTEC	The vulnerability of the fgfmd software for Fortinet FortiManager device centralized management allows a perpetrator to execute arbitrary code.	25 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-47575	23 Oct 202416:01	–	circl
CISA KEV Catalog	Fortinet FortiManager Missing Authentication Vulnerability	23 Oct 202400:00	–	cisa_kev

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-423
cisa	www.cisa.gov/news-events/alerts/2024/10/23/cisa-adds-one-known-exploited-vulnerability-catalog
cloud	www.cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575

30 Oct 2024 12:00Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.9495

SSVC

fortinet fortimanager vulnerability indicators of compromise remote exploitation cisa recommendation security patches.