Skip to content

Fortinet Releases Security Updates for FortiOS - 20240612002

Overview

Fortinet has released security updates to address a vulnerability in FortiOS allowing an attacker to execute unauthorized code or commands via specially crafted commands.

What is vulnerable?

Product(s) Affected CVE CVSS Severity
FortiOS 7.4: below version 7.4.3
FortiOS 7.2: below version 7.2.7
FortiOS 7.0: below version 7.0.14
FortiOS 6.4: below version 6.4.15
FortiOS 6.2: below version 6.2.16
FortiOS 6.0: all versions
CVE-2024-23110 7.8 High

What has been observed?

There is no evidence of exploitation in the wild at the time of writing.

Recommendation

The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframe of one month... (refer Patch Management):