Do Son Fortinet warns of a novel persistence exploit using symbolic links in FortiGate SSL-VPNs. Upgrade to patched FortiOS versions to mitigate the threat.
CVE-2024-21762
Proof-of-concept (PoC) code is now available for a critical severity vulnerability (CVE-2024-21762) in FortiOS SSL VPN
Dubbed CVE-2024-23113 (CVSS 9.8), this flaw allow unauthenticated attackers to remotely execute code on affected devices.
CVE-2024-21762 (CVSS 9.6), poses a significant risk, potentially enabling unauthenticated remote code execution on affected devices.