3690 matches found
PT-2023-7425 · Fortinet · Fortiproxy +1
Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.0 through 7.2.3 FortiOS versions prior to 7.0.10 FortiProxy versions 7.2.0 through 7.2.2 FortiProxy versions prior to 7.0.8 Description: The issue is related to an improper restriction of excessive authentication attempts...
Cross Site Scripting vulnerabilities in administrative interface
...
FortiOS_ FortiProxy_ FortiSwitchManager v7.2.1 - Authentication Bypass
Exploit Title: Fortinet Authentication Bypass v7.2.1 - FortiOS, FortiProxy, FortiSwitchManager Date: 13/10/2022 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.fortinet.com/ Version: FortiOS from 7.2.0 to 7.2.1 FortiOS from 7.0.0 to 7.0.6 FortiProxy 7.2.0 FortiProxy from...
Fortinet 7.2.1 Authentication Bypass
Exploit Title: Fortinet Authentication Bypass v7.2.1 - FortiOS, FortiProxy, FortiSwitchManager Date: 13/10/2022 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.fortinet.com/ Version: FortiOS from 7.2.0 to 7.2.1 FortiOS from 7.0.0 to 7.0.6 FortiProxy 7.2.0 FortiProxy from...
FortiOS FortiProxy FortiSwitchManager v7.2.1 - Authentication Bypass Vulnerability
Exploit Title: Fortinet Authentication Bypass v7.2.1 - FortiOS, FortiProxy, FortiSwitchManager Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.fortinet.com/ Version: FortiOS from 7.2.0 to 7.2.1 FortiOS from 7.0.0 to 7.0.6 FortiProxy 7.2.0 FortiProxy from 7.0.0 to 7.0.6...
Exploit for Out-of-bounds Write in Fortinet Fortios
CVE-2022-42475-RCE-POC Vulnerability Name CVE-2022-4247...
Exploit for Out-of-bounds Write in Fortinet Fortios
CVE-2022-42475-RCE-POC Vulnerability Name CVE-2022-4247...
The vulnerability of the SSL-VPN portal for operating systems FortiOS and the proxy server used for protecting against internet attacks by FortiProxy allows attackers to induce a service failure.
The vulnerability of the SSL-VPN portal for FortiOS operating systems and the FortiProxy proxy server used to protect against internet attacks is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a...
The vulnerability of the administration interface of FortiOS operating systems and the FortiProxy proxy server, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the administrative interface of FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...
Exploit for Out-of-bounds Write in Fortinet Fortios
cve-2022-42475 POC code to exploit the Heap overflow in Fortin...
The vulnerability of the Virtual Domains (VDOM) virtualization technology in operating systems FortiOS and proxy servers for protecting against Internet attacks by FortiProxy allows attackers to increase their privileges.
The vulnerability of the Virtual Domains VDOM virtualization technology in operating systems FortiOS and proxy servers for protecting against Internet attacks via FortiProxy is related to errors in processing relative path operations to directories. Exploiting this vulnerability can allow attacke...
Chinese Hackers Exploit Fortinet Zero-Day Flaw for Cyber Espionage Attack
The zero-day exploitation of a now-patched medium-severity security flaw in the Fortinet FortiOS operating system has been linked to a suspected Chinese hacking group. American cybersecurity company Mandiant, which made the attribution, said the activity cluster is part of a broader campaign...
Exploit for Out-of-bounds Write in Fortinet Fortios
FortiOS SSL-VPN buffer overflow vulnerability cve-2022-424...
Fortinet FortiOS - Path Traversal Vulnerability (FG-IR-22-401)
The version of FortiOS installed on the remote host is affected by a path traversal vulnerability. A relative path traversal vulnerability CWE-23 in FortiOS and FortiProxy may allow privileged VDOM administrators to escalate their privileges to super admin of the box via crafted CLI requests. Not...
The vulnerability of the FortiOS operating systems arises from incorrect restrictions on path names to restricted directories, allowing attackers to read and write arbitrary files.
The vulnerability of the FortiOS operating systems is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability allows an attacker to read and write arbitrary files by executing commands in the command line interface...
Fortinet FortiOS Flaw Exploited in Targeted Cyberattacks on Government Entities
Government entities and large organizations have been targeted by an unknown threat actor by exploiting a security flaw in Fortinet FortiOS software to result in data loss and OS and file corruption. "The complexity of the exploit suggests an advanced actor and that it is highly targeted at...
Fortinet FortiOS Flaw Exploited in Targeted Cyberattacks on Government Entities
Government entities and large organizations have been targeted by an unknown threat actor by exploiting a security flaw in Fortinet FortiOS software to result in data loss and OS and file corruption. "The complexity of the exploit suggests an advanced actor and that it is highly targeted at...
Fortinet FortiOS Path Traversal Vulnerability
Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands...
Fortinet FortiOS - Information Disclosure (FG-IR-22-364)
The version of FortiOS installed on the remote host is therefore, affected by a information disclosure vulnerability. An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS and FortiProxy may allow an unauthenticated attacker to obtain sensitive logging information...
Multiple Vulnerabilities in Various Fortinet Products in March 2023
Threat Level Vulnerability Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary Fortinet has identified a number of vulnerabilities in several of its products, including FortiOS, FortiProxy, FortiAnalyzer, and others, which range from...