FortiWeb Network Firewall Loop DoS

The vulnerability of FortiWeb web applications’ firewalls, FortiOS operating systems, and FortiProxy proxy servers for protecting against Internet attacks is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a remote attacker to cause...

Fortinet FortiOS Flaw Exploited in Targeted Cyberattacks on Government Entities

Government entities and large organizations have been targeted by an unknown threat actor by exploiting a security flaw in Fortinet FortiOS software to result in data loss and OS and file corruption. "The complexity of the exploit suggests an advanced actor and that it is highly targeted at...

FortiOS RSA SSH MITM

The vulnerability of the FortiOS operating systems is related to errors in the management of the RSA SSH cryptographic key. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack...

ZebOS Component Modification Routing

The vulnerability of the ZebOS component of the FortiOS operating system is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to remotely modify routing settings...