Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Fortinet FortiOS, FortiManager, FortiAnalyzer, and other Fortinet products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could result in arbitrary code execution. Depending on the privileges associated with the account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Accounts configured to have fewer user rights on the system could be less impacted than those that operate with administrative user rights.
Read at CIS / MS-ISAC Cybersecurity Advisories
- Vendor
- Fortinet
- Product
- FortiOS / FortiGate, FortiManager / FortiAnalyzer
- Exposure class
- Edge / VPN / firewall, Network management
Why it ranks 42 (Notable)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Fortinet)
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CIS / MS-ISAC Cybersecurity Advisories (cisecurity.org)