Critical · published February 9, 2024
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.7th percentile for exploit probability.
🚨 An out-of-bounds write in Fortinet FortiOS and FortiProxy can turn your network security into a playground for attackers! 🔥 Think of this vulnerability like a misplaced package at a bustling airport — if the handlers don’t check where it’s going, it could end up on the wrong flight, carrying all sorts of trouble with it! An attacker can exploit this vulnerability to execute unauthorized code or commands, potentially taking full control of your network devices. This could lead to devastating consequences, including data breaches and total system compromise. It's a nightmare scenario that could cripple your operations!
Think of this vulnerability like a misplaced package at a bustling airport — if the handlers don’t check where it’s going, it could end up on the wrong flight, carrying all sorts of trouble with it! This out-of-bounds write flaw allows attackers to manipulate system memory, leading to unauthorized code execution through specially crafted requests sent to vulnerable Fortinet devices.
An attacker can exploit this vulnerability to execute unauthorized code or commands, potentially taking full control of your network devices. This could lead to devastating consequences, including data breaches and total system compromise. It's a nightmare scenario that could cripple your operations! Immediately update FortiOS to versions 7.4.3 or later, and FortiProxy to versions 7.4.3 or later. It’s critical to conduct a thorough audit of your network to identify any compromised systems and implement additional monitoring to detect unusual activities. 🛡️ You've got this! By taking swift action, you can secure your systems and keep your network safe. Let's do this! 💪🌟
| Product | Versions | Fixed in |
|---|---|---|
| fortinet/fortiproxy | ≥ 1.0.0, < 2.0.14 | 2.0.14 |
| fortinet/fortiproxy | ≥ 7.0.0, < 7.0.15 | 7.0.15 |
| fortinet/fortiproxy | ≥ 7.2.0, < 7.2.9 | 7.2.9 |
| fortinet/fortiproxy | ≥ 7.4.0, < 7.4.3 | 7.4.3 |
| fortinet/fortios | ≥ 6.0.0, < 6.0.18 | 6.0.18 |
| fortinet/fortios | ≥ 6.2.0, < 6.2.16 | 6.2.16 |
| fortinet/fortios | ≥ 6.4.0, < 6.4.15 | 6.4.15 |
| fortinet/fortios | ≥ 7.0.0, < 7.0.14 | 7.0.14 |
| fortinet/fortios | ≥ 7.2.0, < 7.2.7 | 7.2.7 |
| fortinet/fortios | ≥ 7.4.0, < 7.4.3 | 7.4.3 |