#fortios

A critical flaw in FortiOS and FortiSwitchManager could allow unauthenticated attackers to execute arbitrary code over the network.

Source: Arctic Wolf

在 Bruce Schneier 那邊看到的：「Attack on Old ANSI Random Number Generator」，攻擊的網站在「The DUHK Attack」，論文在「Practical state recovery attacks against legacy RNG implementations (PDF)」。 攻擊的對象是 ANSI X9.31 Random Number Generator： DUHK (Don’t Use Hard-coded Keys) is a vulnerability that affects devices using the ANSI X9.31 Random Number Generator (RNG) in conjunction with a hard-coded seed key. 然後攻擊的對象是 Fortinet…

A years-old FortiOS bug is being actively abused to slip past two-factor authentication, exposing VPN and admin access where LDAP setups are misaligned.

Source: Fortinet

Read the full report on -

由於 FortiGate 600C 等較早期機型的 FortiOS 版本(5.x.x )，不支援在GUI下設定PPPOE。故只能夠過下指令的方式設定之（不管是直接接console線下指令或是在GUI的指令視窗都可以） 設定指令的參考範本：config system interface edit “wan1” set vdom “root” set mode pppoe set allowaccess ping fgfm set type physical set alias “MyISP” set username “” set password “”end

Fortinet has released patches for a high-severity cross-site scripting (XSS) vulnerability impacting multiple FortiOS and FortiProxy versions. Tracked as CVE-2023-29183 (CVSS score of 7.3), the security defect is described as an “improper neutralization of input during web page generation”. Successful exploitation of the bug, Fortinet explains in an advisory, may allow an authenticated attacker…

A ‘critical’ severity flaw has been detected inFortiOS and FortiProxy, identified as CVE-2023-33308 (CVSS rating 9.8). A remote attacker can use the vulnerability on susceptible devices to execute Fortinet arbitrary code. “A stack-based overflow vulnerability [CWE-124] in FortiOS&FortiProxy may allow a remote attacker to execute arbitrary code or command via crafted packets reaching proxy…

Cybercriminals Selling Access to Networks Compromised via Recent Fortinet Vulnerability

Home › Vulnerabilities Cybercriminals Selling Access to Networks Compromised via Recent Fortinet Vulnerability By Ionut Arghire on November 29, 2022 Tweet Security researchers at Cyble have observed initial access brokers (IABs) selling access to enterprise networks likely compromised via a recently patched critical vulnerability in Fortinet products. Tracked as CVE-2022-40684 and impacting…