Multiple Vulnerabilities Affecting Fortinet FortiOS and FortiProxy
Multiple critical and high security vulnerabilities have been disclosed in Fortinet FortiOS and FortiProxy, potentially allowing remote unauthorized administrative access and execution of arbitrary code.
Description
Technical context and vulnerability details
Fortinet has released security advisories addressing multiple security weaknesses in FortiOS and FortiProxy web interface modules.
These products are affected by the following vulnerabilities:
CVE-2024-55591: Critical authentication bypass vulnerability in Node.js WebSocket communication. Remote attackers can craft WebSocket messages to gain super-admin privileges. Classified Critical with a CVSS v3.1 score of 9.8.
Potential Risks & Impact
Potential consequences upon exploitation
- Remote administrative compromise without prior credentials;
- Unauthorized configuration changes and session interception;
- Risk of pivoting into secured internal corporate network segments.
Affected systems
Products, components and targeted versions
- FortiOS 7.4: versions 7.4.0 to 7.4.2;
- FortiOS 7.2: versions 7.2.0 to 7.2.6;
- FortiOS 7.0: versions 7.0.0 to 7.0.13;
- FortiProxy 7.2: versions 7.2.0 to 7.2.8;
- FortiProxy 7.0: versions 7.0.0 to 7.0.14.
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Apply vendor security updates to FortiOS 7.4.3, 7.2.7, or 7.0.14 or higher;
- Upgrade FortiProxy to versions 7.2.9 or 7.0.15 or higher;
- Ensure management interfaces are not exposed to the public internet.
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.