Sysadmin @lemmy.ml Tempiz @sh.itjust.works 1y ago

Fortinet SSL-VPN Critical Vulnerability - June 12, 2023

None

A buffer overflow vulnerability was found within SSL-VPN in FortiOS leading to unauthorized code execution. Options are either to disable SSL-VPN or upgrade to a patched version.

Cybersecurity @sh.itjust.works Tempiz @sh.itjust.works 1y ago

www.fortiguard.com /psirt/FG-IR-23-097

12 0

netsec - Network Security @discuss.tchncs.de cookiengineer @discuss.tchncs.de 1y ago

Heap-based buffer overflow RCE weakness in FortiOS and FortiProxy SSL-VPN

www.fortiguard.com /psirt/FG-IR-23-097

4 0

3 comments

Isn't this the second SSL-VPN vulnerability that's come from Fortigate in the last couple months?
- Yep, i believe it was also a buffer overflow vulnerability similar to this one. No idea whats going on over there.
- Sure is! Our network admin just shook his head at his screen when I forwarded him the notice I got haha.