Fortinet FortiOS security vulnerabilities

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

Fortinet FortiNAC code-related vulnerabilities

Fortinet FortiNAC is a zero-trust access solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiNAC. An attacker exploiting this vulnerability could read arbitrary files or trigger a denial of service via a specially crafted method. The following versions are affected:...

Fortinet FortiNAC security vulnerability

Fortinet FortiNAC is a zero-trust access solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiNAC versions 9.4.0 through 9.4.1, prior to 9.2.6, which stems from improper authorization...

Fortinet FortiNAC cross-site scripting vulnerability

Fortinet FortiNAC is a zero-trust access solution from Fortinet. A security vulnerability exists in Fortinet FortiNAC portal UI versions prior to 9.4.1, which stems from improper neutralization of user input. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...

Fortinet FortiNAC security vulnerability

Fortinet FortiNAC is a zero-trust access solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiNAC. An attacker could exploit the vulnerability to execute unauthorized code or commands via specially crafted HTTP requests. The following versions are affected: version 9.4.0,...

Fortinet FortiNAC encryption issue vulnerability

Fortinet FortiNAC is a zero-trust access solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiNAC. An attacker could exploit the vulnerability to decrypt and forge protocol communication messages. The following versions are affected: versions 9.4.0 through 9.4.1, 9.2.0...

Fortinet FortiWAN operating system command injection vulnerability

Fortinet FortiWAN is a network appliance from Fortinet that performs load balancing and fault tolerance between different networks. A security vulnerability exists in Fortinet FortiWAN, which can be exploited by a remote attacker to submit a special request that can be used to execute arbitrary...

Fortinet FortiWeb buffer error vulnerability

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A buffer overflow vulnerability exists that...

PT-2023-12904 · Fortinet · Fortiextender

Name of the Vulnerable Software and Affected Versions: Fortinet FortiExtender versions 7.0.0 through 7.0.3 Fortinet FortiExtender version 5.3.2 Fortinet FortiExtender versions 4.2.4 and below Description: The issue is related to an improper neutralization of special elements used in an os command...

SUSE CVE-2016-8492

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption...

PT-2023-8534

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.4.0 through 7.4.2 FortiOS versions 7.2.0 through 7.2.6 FortiOS versions 7.0.0 through 7.0.13 FortiOS versions 6.4.0 through 6.4.14 FortiOS versions 6.2.0 through 6.2.15 FortiOS versions 6.0.0 through 6.0.17 FortiProxy versio...

Exploit for Download of Code Without Integrity Check in Fortinet Fortios

Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168...

PT-2023-1739 · Fortinet · Fortianalyzer

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAnalyzer versions 6.4.0 through 6.4.9 Fortinet FortiAnalyzer versions 7.0.0 through 7.0.5 Fortinet FortiAnalyzer versions 7.2.0 through 7.2.1 Description: The issue is related to the improper neutralization of formula elements i...

Fortinet FSSO Authentication Mechanism Auth Bypass

The vulnerability of the Fortinet Single Sign-On FSSO Authentication Mechanism lies in the flaws in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to the secure network using specially created UDP packets...

New BOLDMOVE Backdoor uses FortiOS vulnerability for initial access

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A suspected China-nexus campaign has exploited a vulnerability in Fortinets FortiOS SSL-VPN, known as CVE-2022-42475. The exploitation was believed to have occurred as early as October 2022 and the targe...

Backdoor into FortiOS: Chinese Threat Actors Utilize 0-Day

By Deeba Ahmed Chinese hackers are exploiting a previously patched vulnerability found in Fortinet FortiOS SSL-VPN by using new malware called BOLDMOVE. This is a post from HackRead.com Read the original post: Backdoor into FortiOS: Chinese Threat Actors Utilize 0-Day...

Chinese Hackers Exploited Recent Fortinet Flaw as 0-Day to Drop Malware

A suspected China-nexus threat actor exploited a recently patched vulnerability in Fortinet FortiOS SSL-VPN as a zero-day in attacks targeting a European government entity and a managed service provider MSP located in Africa. Telemetry evidence gathered by Google-owned Mandiant indicates that the...

Chinese Hackers Exploited Recent Fortinet Flaw as 0-Day to Drop Malware

A suspected China-nexus threat actor exploited a recently patched vulnerability in Fortinet FortiOS SSL-VPN as a zero-day in attacks targeting a European government entity and a managed service provider MSP located in Africa. Telemetry evidence gathered by Google-owned Mandiant indicates that the...

FortiOS Flaw Exploited as Zero-Day in Attacks on Government and Organizations

A zero-day vulnerability in FortiOS SSL-VPN that Fortinet addressed last month was exploited by unknown actors in attacks targeting governments and other large organizations. "The complexity of the exploit suggests an advanced actor and that it is highly targeted at governmental or...

FortiOS Flaw Exploited as Zero-Day in Attacks on Government and Organizations

A zero-day vulnerability in FortiOS SSL-VPN that Fortinet addressed last month was exploited by unknown actors in attacks targeting governments and other large organizations. "The complexity of the exploit suggests an advanced actor and that it is highly targeted at governmental or...