Fortinet, a number one cybersecurity firm, has not too long ago addressed a vital vulnerability in FortiGate that could possibly be exploited by unauthorized attackers for distant code execution. The flaw, tracked as CVE-2023-27997, was first recognized by researchers at Lexfo, a French offensive IT safety agency.
Charles Fol, one of many researchers, disclosed on Twitter that the vulnerability impacts all SSL VPN home equipment and permits for distant code execution with out authentication. Whereas Fortinet has not but issued an official advisory concerning the flaw, Olympe Cyberdefense, a French cybersecurity firm, revealed {that a} public advisory is predicted to be launched on June 13.
The safety gap particularly impacts the SSL VPN performance of FortiGate firewalls, granting attackers the flexibility to intervene with the VPN. Luckily, Fortinet has reportedly included the required patch in variations 7.0.12, 7.2.5, 6.4.13, and 6.2.15 of FortiOS.
It’s price noting that vulnerabilities affecting Fortinet merchandise have been regularly exploited by risk actors, together with each state-sponsored cyberspies and profit-driven cybercriminals. In lots of circumstances, these exploits happen earlier than patches have been made obtainable, underscoring the vital significance of immediate updates and proactive safety measures.
Brian Contos, CSO, Sevco Safety shared how organizations can shield themselves from threats associated to those vulnerabilities and the way he thinks the vulnerability disclosure course of must shift to a extra proactive strategy:
“The necessary first step for any group to take is to patch this Fortinet vulnerability. If you happen to’re studying this and also you haven’t achieved that but, cease what you’re doing and patch instantly. However the usual working process for locating these kind of vulnerabilities has to alter. Disclosure, patch, and cross your fingers that you just fastened the difficulty earlier than the unhealthy guys received into your community merely isn’t ok.
Organizations have to shift from a reactive stance to a proactive one the place they’re searching their vulnerabilities and remediating them earlier than a nasty actor exploits them. This begins with correct and well timed asset intelligence, which is required to function the inspiration of a sound safety program.”
###
