•

Critical Fortinet Security Vulnerability

MFA no protection against new Fortinet bug CVE-2023-27997

https://www.thestack.technology/fortinet-vulnerability-vpn-cve-2023-27997/

"It is a pre-auth RCE [and] has been proven to be exploitable in a consistent manner; we found it during a Red Team engagement and have exploited it remotely..."

MFA no protection against new Fortinet bug CVE-2023-27997

Reminder for all to upgrade your Fortis ASAP!

8 comments

Oscillon

•

Another day, another Fortigate CVE 😬

manifex

•

So frustrating... I have a fleet of around 40 devices I have to update with coordination of each site.

borari

•

Ah, I had posted this over in !cybersecurity@sh.itjust.works, but I totally forgot to cross-post it over here! It's going to take me a while to remember the communities on lemmy that are relevant and active.

But yeah, it's a pre-auth vulnerability, so definitely patch up asap!

hondenkop

•

Thanks for the new community!