A key Fortinet vulnerability gets zero-day RCE exploits

In its initial investigation, Fortinet found no evidence or reports of any low-level malware installation or backdoors in vulnerable systems, according to the advisory.

“To the best of our knowledge, there are no indications of information being changed, or communications being modified on managed devices,” added Fortinet.

Affected versions of FortiManager include FortiManager 6.2, 6.4,7.0,7.2, 7.4, and 7.6 which have been fixed in their respective releases. Additionally, FortiManager Cloud versions 6.4, 7.0, 7.2, and 7.4 are affected by the fix in their subsequent versions, except for 6.4 which has all of its releases affected.


Source link