> ## Content Index > Fetch the complete content index at: https://www.brewingbytesandbeans.com/llms.txt > Use this file to discover other available public pages before exploring further. # Latest Fortinet SSL VPN Vulnerability Exploited in Attacks: RCE Risk Identified - URL: https://www.brewingbytesandbeans.com/latest-fortinet-ssl-vpn-vulnerability-exploited-in-attacks-rce-risk-identified/ - Published: 2024-02-08T23:25:54.000Z - Updated: 2024-02-08T23:36:34.000Z - Description: Latest Fortinet SSL VPN Vulnerability Exploited in Attacks: RCE Risk Identified - Author: matthew vinck - Tags: cyber security, fortigate, fortinet **Alert!** Fortinet rings the alarm bells as a critical vulnerability brews in FortiOS SSL VPN, threatening to scorch the cybersecurity landscape. | Version | Affected | Solution | | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------- | -------------------------- | | FortiOS 7.6 | Not affected | Not Applicable | | FortiOS 7.4 | 7.4.0 through 7.4.2 | Upgrade to 7.4.3 or above | | FortiOS 7.2 | 7.2.0 through 7.2.6 | Upgrade to 7.2.7 or above | | FortiOS 7.0 | 7.0.0 through 7.0.13 | Upgrade to 7.0.14 or above | | FortiOS 6.4 | 6.4.0 through 6.4.14 | Upgrade to 6.4.15 or above | | FortiOS 6.2 | 6.2.0 through 6.2.15 | Upgrade to 6.2.16 or above | | FortiOS 6.0 | 6.0 all versions | Migrate to a fixed release | | This vulnerability, tagged as CVE-2024-21762 / FG-IR-24-015, carries an explosive 9.6 severity rating, akin to a high-octane espresso shot fueling cyber assailants' ambitions. It's a brewing storm, an out-of-bounds write vulnerability inviting malicious actors to wield remote code execution (RCE) with ruthless efficiency.Fortinet's solution? Swift action. Upgrade to the latest version, fortifying defenses like fortifying a fortress against invaders. For those lagging behind, a temporary shield: disable SSL VPN on FortiOS devices. It's a crucial line of defense until the full armor of patches can be applied.But that's not all. Fortinet's disclosure spills over with revelations of CVE-2024-23113 (Critical/9.8 rating), CVE-2023-44487 (Medium), and CVE-2023-47537 (Medium), painting a grim picture of a battlefield strewn with vulnerabilities. Source: https://www.fortiguard.com/psirtEnter the adversaries – Chinese state-sponsored threat actors, Volt Typhoon. Their weapon of choice? COATHANGER, a custom remote access trojan (RAT) unleashed through FortiOS vulnerabilities, with recent victims including the Dutch Ministry of Defence.In this digital warzone, every second counts. Update your defenses now, for the cyber storm is upon us, and the consequences of inaction are dire. Fortinet's message is clear: Act fast, fortify your defenses, and let's fend off the onslaught of cyber threats together. The battlefield awaits. Sign up for Brewing Bytes and Beans Cyber Security, Networking, Tech News, and Coffee Addiction Subscribe Email sent! Check your inbox to complete your signup. No spam. Unsubscribe anytime. | | |