Fortinet FortiOS Integer Overflow (FG-IR-21-155)

An integer overflow vulnerability in the dhcpd daemon of FortiOS allows unauthenticated, adjacent attackers to cause a denial of service DoS condition. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

Fortinet FortiADC SQL Injection Vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC suffers from a SQL injection vulnerability that stems from insufficient cleanup of user-supplied data in the FortiADC management interface. A remote attacker could exploit this vulnerability to send a...

Cisco and Fortinet Release Security Patches for Multiple Products

Cisco on Wednesday rolled out patches for 10 security flaws spanning multiple products, one of which is rated Critical in severity and could be weaponized to conduct absolute path traversal attacks. The issues, tracked as CVE-2022-20812 and CVE-2022-20813, affect Cisco Expressway Series and Cisco...

Fortinet FortiVoice 输入验证错误漏洞

Fortinet FortiVoice is a network communications solution from Fortinet, Inc. An input validation error vulnerability exists in Fortinet FortiVoice. An attacker could exploit this vulnerability by sending specially crafted traffic to an affected system, triggering an integer overflow and performin...

Fortinet FortiProxy 缓冲区错误漏洞

Fortinet FortiProxy is a secure network proxy from Fortinet that protects employees from cyberattacks by combining multiple detection technologies such as Web filtering, DNS filtering, DLP, anti-virus, intrusion prevention, and advanced threat protection.FortiProxy helps reduce bandwidth...

Fortinet FortiOS 跨站脚本漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering, anti-spam, and other security features. A cross-site scripting vulnerabilit...

Fortinet FortiClient 路径遍历漏洞

Fortinet FortiClient is a structured agent from Fortinet, Inc. It is used to provide protection, compliance, and secure access in a single modular lightweight client. A path traversal vulnerability exists in Fortinet FortiClient that stems from an input validation error when processing a director...

Fortinet FortiDeceptor 路径遍历漏洞

Fortinet FortiDeceptor is a cyber threat detection platform from the American company Fiat Fortinet. The platform exposes cyber threats, among other things, through spoofing techniques. Fortinet FortiDeceptor suffers from a path traversal vulnerability that stems from an input validation error wh...

Fortinet FortiManager 缓冲区错误漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment a...

Fortinet FortiNAC 安全漏洞

Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. A security vulnerability exists in Fortinet FortiNAC, which originates from a root account that accesses the MySQL databas...

Fortinet FortiOS < 6.4 MitM (FG-IR-18-292)

An improper certificate validation vulnerability in FortiOS allows an adjacent, unauthenticated attacker to man-in-the-middle communication. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

Fortinet FortiClient 6.0.x / 6.2.x / 6.4.x < 6.4.7 / 7.x < 7.0.1 Privilege Escalation (FG-IR-21-088)

The version of Fortinet FortiClient running on the remote host is affected by a privilege escalation vulnerability. An unsafe search path vulnerability in FortiClien Windows 7.0.0, 6.4.6 and below, 6.2.x, and 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a...

Fortinet FortiAP-U 路径遍历漏洞

Fortinet FortiAP-U is a controller for managing wireless access point devices from Fortinet, Inc. A path traversal vulnerability exists in the Fortinet FortiAP-U that stems from an input validation error when processing a directory traversal sequence in certain CLI commands. A local attacker coul...

Vulnerability fixed in Fortinet products

Vulnerabilities have been fixed in several products from Fortinet. The vulnerabilities allow a malicious party to execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Manipulation of data Circumvention of security measure Remote code execution...

Fortinet FortiToken Mobile 信任管理问题漏洞

Fortinet FortiToken Mobile is an Oath-compliant, event-based and time-based one-time password Otp generator application from U.S.-based Fortinet. A security vulnerability exists in Fortinet FortiToken Mobile that originates from incorrect certificate validation. A remote attacker could exploit th...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...

多款Fortinet产品信任管理问题漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A trust management issue...

Multiple vulnerabilities in Apache Airflow

Security advisories were released affecting the version of Apache Airflow library used in some Fortinet products:...

Fortinet FortiDDoS 信任管理问题漏洞

Fortinet FortiDDoS is the only checkable DDoS mitigation platform from Fortinet USA. Fortinet FortiDDoS has a security vulnerability that stems from the use of hard-coded encryption keys. A remote attacker exploits the vulnerability to sign JWT tokens for other devices...

The vulnerability of Fortinet FortiAP-S/W2 and FortiAP microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system command set. This allows attackers to execute arbitrary commands.

The vulnerability of Fortinet FortiAP-S/W2 and FortiAP lies in the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...