Critical Out-of-Bounds Write Vulnerability CVE-2024-21762 in FortiOS and FortiProxy
This vulnerability could allow a remote unauthenticated attacker to execute arbitrary code or command in FortiOS and FortiProxy SSL-VPN devices
Summary
This vulnerability could allow a remote unauthenticated attacker to execute arbitrary code or command in FortiOS and FortiProxy SSL-VPN devices
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
Fortinet has released a security update to address a critical severity vulnerability in FortiOS and FortiProxy SSL-VPN devices with a CVSSv3 score of 9.6.
CVE-2024-21762 is an out-of-bounds write vulnerability, which may allow a remote unauthenticated attacker to execute arbitrary code or command via specially crafted HTTP requests.
Evidence of exploitation
Fortinet have warned that this vulnerability is potentially being exploited in the wild. VPN appliances are often internet-facing by design and frequent targets for exploitation by cyber threat groups. Previous Fortinet SSL-VPN vulnerabilities have been exploited in the wild within days of official disclosure.
Remediation advice
Affected organisations are required to review Fortinet PSIRT Advisory FG-IR-24-015 along with the relevant FortiProxy release notes and apply the security updates as soon as possible.
Due to the rapidly changing nature of this vulnerability, it is recommended that affected organisations monitor this cyber alert for any future updates.
Definitive source of threat updates
Last edited: 9 February 2024 11:54 am