FortiOS / FortiProxy: Heap buffer underflow in administrative interface
Our experts keep you up-to-date on critical cyber threats (CVEs)
A buffer underwrite ("buffer underflow") vulnerability in the FortiOS & FortiProxy administrative interface could allow a remote unauthenticated attacker to execute arbitrary code on the device and/or perform a DoS on the GUI...
FortiOS / FortiProxy: Heap buffer underflow in administrative interface
A buffer underwrite ('buffer underflow') vulnerability in the FortiOS & FortiProxy administrative interface could allow a remote unauthenticated attacker to execute arbitrary code on the device and/or perform a DoS on the GUI, via specifically crafted requests.
Fortinet is not aware of any instance of this vulnerability being exploited. They constantly review and test the security of their products, and this vulnerability was discovered internally within that framework.
Take action
The above vulnerability is really critical (CVE score = 9.3). In short: there is really no choice > action MUST be taken. Hence our managed customers are already helped and provided with the necessary updates.
Need help? Contact us to fix this problem for you. You can do this by mail at support@vanroey.be or count: 014 470 600. You can also have a create a ticket.
Can't create tickets? Ask here to get an account. If our Engineer needs to remotely control your PC, he or she will ask you to run this software .
