décembre 13, 2022

Fortinet Warns of Active Exploitation of New SSL-VPN Pre-auth RCE Vulnerability

by admin in Non classé

Fortinet Warns of Active Exploitation of New SSL-VPN Pre-auth RCE Vulnerability,

Fortinet on Monday issued emergency patches for a severe security flaw affecting its FortiOS SSL-VPN product that it said is being actively exploited in the wild.
Tracked as CVE-2022-42475 (CVSS score: 9.3), the critical bug relates to a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to execute arbitrary code via specially crafted requests.
The company said

,

Fortinet on Monday issued emergency patches for a severe security flaw affecting its FortiOS SSL-VPN product that it said is being actively exploited in the wild.
Tracked as CVE-2022-42475 (CVSS score: 9.3), the critical bug relates to a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to execute arbitrary code via specially crafted requests.
The company said

, ,
https://thehackernews.com/2022/12/fortinet-warns-of-active-exploitation.html