Fortinet warns of a novel persistence exploit using symbolic links in FortiGate SSL-VPNs. Upgrade to patched FortiOS versions to mitigate the threat.
CVE-2022-42475
Uncover the critical details about Volt Typhoon APT group: a state-sponsored threat targeting US critical infrastructure sectors.
CVE-2022-42475 affects FortiOS SSL-VPN and allows an attacker could overflow a buffer and execute arbitrary code on the system