The resolution of such issues is coordinated by the Fortinet Product Security Incident Response Team (PSIRT), a dedicated, global team that manages the receipt, investigation, and public reporting of information about security vulnerabilities and issues related to …

2025年1月14日 · An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module. ... Fortinet, Inc. ...

On January 14, Fortinet released a security advisory (FG-IR-24-535) addressing a critical severity vulnerability impacting FortiOS and FortiProxy. CVE-2024-55591 is an authentication bypass vulnerability in FortiOS and FortiProxy.

2025年1月14日 · Threat actors are exploiting what is strongly suspected to be a zero-day vulnerability, allowing unauthorized administrative access to modify firewall configurations, extract credentials, and move laterally within compromised environments.

2024年10月9日 · Today, CISA revealed that attackers actively exploit a critical FortiOS remote code execution (RCE) vulnerability in the wild.

2025年1月16日 · Fortinet’s advisory for CVE-2024-55591 includes indicators of compromise (IOCs) and notes that the vulnerability was reported as exploited in the wild at time of disclosure. No individual or firm is explicitly credited for discovering the vulnerability in Fortinet’s advisory, and Fortinet has not confirmed that CVE-2024-55591 is the zero ...

2024年10月23日 · Fortinet publicly disclosed today a critical FortiManager API vulnerability, tracked as CVE-2024-47575, that was exploited in zero-day attacks to steal sensitive files containing...

2025年1月16日 · Another indicator was the presence of two other IoCs commonly found in an older published vulnerability. Configuration obtained by user Local_Process_Access; Malicious Admin: fortigate-tech-support; Given both points, it is highly likely that this data was obtained via the previously communicated and resolved vulnerability FG-IR-22-377 / CVE ...

2025年1月14日 · In an advisory published Tuesday, security product maker Fortinet confirmed that a critical-rated vulnerability in its FortiGate firewalls, tracked as CVE-2024-55591, is “being exploited in the ...

2022年12月12日 · A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. Exploitation status: