A buffer overflow vulnerability was found within SSL-VPN in FortiOS leading to unauthorized code execution. Options are either to disable SSL-VPN or upgrade to a patched version.
Fortinet SSL-VPN Critical Vulnerability - June 12, 2023
https://www.fortiguard.com/psirt/FG-IR-23-097
3 Comments
Rekhyt@lemmy.world · 2 pts · 3y
Isn't this the second SSL-VPN vulnerability that's come from Fortigate in the last couple months?
Tempiz@sh.itjust.works · 2 pts · 3y
Yep, i believe it was also a buffer overflow vulnerability similar to this one. No idea whats going on over there.
kalipike@lemmy.one · 2 pts · 3y
Sure is! Our network admin just shook his head at his screen when I forwarded him the notice I got haha.