FortiNO: CISA Adds Fortinet FortiOS to Exploited Vulnerabilities List!
CISA has added a Fortinet FortiOS vulnerability to its Known Exploited Vulnerabilities catalog. This flaw lets remote attackers bypass authentication and gain super-admin access. FortiOS and FortiProxy users should patch up before hackers get too comfortable.
Hot Take:
Ah, Fortinet FortiOS, the software equivalent of leaving your front door wide open with a “Welcome Hackers” mat. CISA’s catalog must feel like a VIP club for vulnerabilities, and FortiOS just got its exclusive membership card! Someone should tell these cyber villains it’s not polite to crash a party uninvited.
Key Points:
- Fortinet FortiOS vulnerability CVE-2024-55591 scores a whopping 9.6 on the CVSS scale.
- The vulnerability allows remote attackers to bypass authentication with crafted Node.js WebSocket requests.
- Impacted versions include FortiOS (7.0.0-7.0.16) and FortiProxy (7.0.0-7.0.19, 7.2.0-7.2.12).
- CISA orders federal agencies to patch this vulnerability by February 2, 2025.
- Other vulnerabilities added to the KEV catalog include three Microsoft Windows Hyper-V flaws.
Already a member? Log in here