Critical FortiOS and FortiProxy Vulnerability Likely Exploited-Patch Now!
On Monday, Fortinet said that a recently patched serious vulnerability affecting FortiOS and FortiProxy may have been "exploited in a limited number of cases" in attacks against the manufacturing, critical infrastructure, and government sectors.
The vulnerability, identified as CVE-2023-27997 (CVSS score: 9.2), affects FortiOS and FortiProxy SSL-VPN and is a heap-based buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code or commands through carefully crafted requests.
Charles Fol and Dany Bach, two LEXFO security experts, are credited with finding and disclosing the vulnerability read more Critical FortiOS and FortiProxy Vulnerability Likely Exploited-Patch Now!.
Stay one step ahead of cyber threats with ReconBee.com. Explore our comprehensiv...