Monday, January 30, 2023
  • Events
  • Interviews
  • Jobs
  • Opinion
  • Whitepapers
  • Glossary
  • Community Forum
  • Web Hosting Directory
  • Login
  • Register
Cloud7 News
  • Cloud Computing
  • Web Hosting
  • Data Center
  • Linux
  • Cybersecurity
  • More
    • Network/Internet
    • Windows
    • Software
    • Hardware
    • Blockchain
    • Policy/Legislation
    • How-Tos
    • Troubleshooting
No Result
View All Result
Cloud7 News
  • Cloud Computing
  • Web Hosting
  • Data Center
  • Linux
  • Cybersecurity
  • More
    • Network/Internet
    • Windows
    • Software
    • Hardware
    • Blockchain
    • Policy/Legislation
    • How-Tos
    • Troubleshooting
No Result
View All Result
Cloud7 News
No Result
View All Result

Home > Cybersecurity > FortiOS is critically vulnerable, patch it now

FortiOS is critically vulnerable, patch it now

Fortinet's FortiOS has been found vulnerable, which allows malicious actors to gain remote code execution abilities.


Ezgi Koc Ezgi Koc
January 16, 2023
2 min read
FortiOS is critically vulnerable, patch it now
  • FortiOS faces a heap-based buffer overflow vulnerability that may enable a remote, unauthorized attacker to issue arbitrary commands or code via carefully orchestrated requests.
  • A workaround for the issue exists and Fortinet advises users to validate and update their systems as soon as possible to protect themselves against the vulnerability.
  • Fortinet reports that it will continue to track the activity on this vulnerability and update its sites accordingly.

Fortinet‘s FortiOS has been found critically vulnerable due to a bug described as “a heap-based buffer overflow vulnerability in FortiOS SSL-VPN“. The vulnerability can be tracked as CVE-2022-42475 and has received a CVSS rating of 9.8, which means critical, by the National Vulnerability Database of the U.S.

Allowing RCE

The vulnerability allows attackers to crash the vulnerable endpoints and gain remote code execution capabilities. The malware was a FortiOS-specific variation of a common Linux implant. The researchers of Fortinet state that the complexity of the exploit suggests an advanced actor. According to the advisory, this “advanced actor” focuses on government-related targets. You can see the details about the malware in Fortinet’s advisory.

The attackers use a file named libips.bak during their attacks, which is a trojanized IPS Engine version

Recommendations

Fortinet is aware of this vulnerability and advises users to validate their systems as soon as possible. You can find the steps you need to take to see if your system has been compromised by clicking here. The current workaround for those who can’t upgrade their systems is to disable the SSL-VPN feature.

Fortinet recommends updating to the latest versions for affected systems, which can be found below:

  • FortiOS version 7.2.0 through 7.2.2
  • FortiOS version 7.0.0 through 7.0.8
  • FortiOS version 6.4.0 through 6.4.10
  • FortiOS version 6.2.0 through 6.2.11
  • FortiOS version 6.0.0 through 6.0.15
  • FortiOS version 5.6.0 through 5.6.14
  • FortiOS version 5.4.0 through 5.4.13
  • FortiOS version 5.2.0 through 5.2.15
  • FortiOS version 5.0.0 through 5.0.14
  • FortiOS-6K7K version 7.0.0 through 7.0.7
  • FortiOS-6K7K version 6.4.0 through 6.4.9
  • FortiOS-6K7K version 6.2.0 through 6.2.11
  • FortiOS-6K7K version 6.0.0 through 6.0.14
  • FortiProxy version 7.2.0 through 7.2.1
  • FortiProxy version 7.0.0 through 7.0.7
  • FortiProxy version 2.0.0 through 2.0.11
  • FortiProxy version 1.2.0 through 1.2.13
  • FortiProxy version 1.1.0 through 1.1.6
  • FortiProxy version 1.0.0 through 1.0.7

See more Cybersecurity News


Tags: FortinetVulnerability
Ezgi Koc

Ezgi Koc

Ezgi Koc is an editor at Cloud7 News. She graduated from Ege University with a bachelor's degree in English Language and Literature. She had a great interest in technology, both hardware and software, since her childhood and decided to pursue a career that would enable her to broaden her horizons in this field. She is very passionate about video games as a Twitch affiliate and streams games in her free time.

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

I agree to the Terms & Conditions and Privacy Policy.

Next Post
Nvidia helps users to maintain the eye contact

Nvidia helps users to maintain the eye contact

Related News

Pentagon supply chain fails basic cybersecurity requirements

Pentagon supply chain fails basic cybersecurity requirements

January 29, 2023 5:00 pm
Radware issued a threat advisory

Chinese 8220 Gang targets public clouds

January 29, 2023 3:00 pm
Thoma Bravo to acquire Magnet Forensics

Thoma Bravo to acquire Magnet Forensics

January 26, 2023 1:10 pm
LastPass faces yet another security incident

LastPass publishes an update on the November 2022 security incident

January 25, 2023 6:35 pm
Get free daily newsletters from Cloud7 News Get the Cloud7 Newsletter
Select list(s):

Check your inbox or spam folder to confirm your subscription.

By subscribing, you agree to our
Copyright Policy and Privacy Policy

Get the free newsletter

Subscribe to receive the latest IT business updates straight to your inbox.

Select list(s):

Check your inbox or spam folder to confirm your subscription.

Editor's Choice

What’s new in Linux kernel 6.2 rc5?

10 Best Web Hosting Services of 2023

Ubuntu 22.04 LTS is available for download. What is new?

CERN and Fermilab recommend AlmaLinux

7 best hosting control panels of 2023

How to update Linux Kernel without rebooting?

7 best Linux mail servers of 2023

7 best cPanel alternatives for 2023

7 best Linux web browsers for 2023

7 best CentOS alternatives

7 best Linux server distros of 2023

Interview with Igor Seletskiy on AlmaLinux

How to create a VM and install a Linux distro on VMware Workstation

Recent News

  • [Event] IT Forum CxO
  • Total public cloud revenues jumped by 21% in 2022
  • Pentagon supply chain fails basic cybersecurity requirements
  • Yugabyte releases YugabyteDB Voyager
  • Chinese 8220 Gang targets public clouds

Cloud7 News
Cloud7 is a news source that publishes the latest news, reviews, comparisons, opinions, and exclusive interviews to help tech users of high-experience levels in the IT industry.

EXPLORE

  • Web Hosting
  • Cloud Computing
  • Data Center
  • Cybersecurity
  • Linux
  • Network/Internet
  • Software
  • Hardware
  • How-Tos
  • Troubleshooting

RESOURCES

  • Events
  • Interviews
  • Jobs
  • Opinion
  • Whitepapers
  • Glossary
  • Community Forum
  • Web Hosting Directory

Get the Cloud7 Newsletter

Get FREE daily newsletters from Cloud7 delivering the latest news and reviews.

  • About
  • Privacy & Policy
  • Copyright Policy
  • Contact

© 2022, Cloud7 News. All rights reserved.

No Result
View All Result
  • Cloud Computing
  • Web Hosting
  • Data Center
  • Linux
  • Cybersecurity
  • More
    • Network/Internet
    • Windows
    • Software
    • Hardware
    • Blockchain
    • Policy/Legislation
    • How-Tos
    • Troubleshooting
  • Events
  • Interviews
  • Jobs
  • Opinion
  • Whitepapers
  • Glossary
  • Community Forum
  • Web Hosting Directory

© 2022, Cloud7 News. All rights reserved.

Welcome Back!

Sign In with Facebook
Sign In with Google
Sign In with Linked In
OR

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Sign Up with Facebook
Sign Up with Google
Sign Up with Linked In
OR

Fill the forms below to register

*By registering into our website, you agree to the Terms & Conditions and Privacy Policy.
All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In
This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.