A Vulnerability in Fortinet FortiMail Could Allow for Arbitrary Code Execution
A vulnerability has been discovered in Fortinet FortiMail that could allow for arbitrary code execution. Fortinet FortiMail is a secure email gateway that protects organizations from inbound threats including spam, phishing, malware, and business email compromise, while also preventing outbound data loss across physical, virtual, and cloud deployments. Successful exploitation of this vulnerability could allow an unauthenticated attacker to write arbitrary files to the underlying system, which could potentially lead to arbitrary code execution.
Read at CIS / MS-ISAC Cybersecurity Advisories
- Vendor
- Cisco, Fortinet
- Product
- Secure Email / Web Appliance, FortiMail
- Exposure class
Why it ranks 27 (Notable)
- Exposed product class: email
- Widely deployed vendor product (Cisco)
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CIS / MS-ISAC Cybersecurity Advisories (cisecurity.org)