High Threat Security Alert (A26-10-45): Multiple Vulnerabilities in Fortinet Products

Description:

Fortinet released security updates and will release security advisories for the affected products to provide the details of the multiple vulnerabilities.

Reports indicated that the vulnerabilities are at high risk of exploitation. System administrators are advised to take immediate action to patch affected systems to mitigate the elevated risk of cyber attacks. We will keep monitoring and provide further updates when necessary.

Affected Systems:

• FortiOS version 7.2.0 through 7.2.13, version 7.4.0 through 7.4.12, version 7.6.0 through 7.6.7, version 8.0.0 through 8.0.1
• FortiManager version 7.2.0 through 7.2.12, version 7.4.0 through 7.4.11, version 7.6.0 through 7.6.7, version 8.0.0 through 8.0.1
• FortiAnalyzer version 7.2.0 through 7.2.12, version 7.4.0 through 7.4.11, version 7.6.0 through 7.6.7, version 8.0.0 through 8.0.1
• FortiMail version 7.2.0 through 7.2.9, version 7.4.0 through 7.4.8, version 7.6.0 through 7.6.6, version 8.0.0 through 8.0.1
• FortiAuthenticator version 6.6.0 through 6.6.10, version 8.0.0 through 8.0.3

For detailed information of the affected products, please refer to the security advisories at vendor's website.

Impact:

Although detailed information has yet to be published, it is noted that the patches include fixes for critical and high severity issues. Unpatched systems may therefore face an elevated risk of cyber attacks.

Recommendation:

Patches for affected systems are available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products