Security concerns arise as potential data breach at cybersecurity giant Fortinet is exposed. Learn about the incident and its impact on customer information.
Fortinet
Horizon3.ai published the technical details and a proof-of-concept (PoC) for a critical unauthenticated RCE vulnerability (CVE-2023-34992)
FortiOS & FortiProxy: Critical Risks (CVE-2023-42789, CVE-2023-42790) These carry the highest severity ratings (9.8 and 8.1)
CVE-2023-36553 and assigned a CVSS score of 9.3, stems from an OS command injection flaw in the FortiSIEM report server.
FortiWLM counterpart, the CVE-2023-34992 vulnerability allows for remote unauthenticated OS command injections
CVE-2023-25610 allows an unauthenticated attacker to execute arbitrary code on the system, caused by a heap buffer underflow in the administrative interface
CVE-2022-39952 could allow unauthenticated threat actors to execute unauthorized code or commands via specifically crafted HTTP requests