Fortinet Products Multiple Vulnerabilities
Release Date: 7 Sep 2022
RISK: Medium Risk
TYPE: Operating Systems - Networks OS
Multiple vulnerabilities were identified in Fortinet Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, cross-site scripting and security restriction bypass on the targeted system.
Impact
- Denial of Service
- Remote Code Execution
- Cross-Site Scripting
- Security Restriction Bypass
System / Technologies affected
- FortiAP-U version 5.4.0 through 5.4.6
- FortiAP-U version 6.0.0 through 6.0.4
- FortiAP-U version 6.2.0 through 6.2.3
- FortiAP-W2 version 6.0.0 through 6.0.6
- FortiAP-W2 version 6.2.0 through 6.2.6
- FortiAP-W2 version 6.4.0 through 6.4.7
- FortiAP-W2 version 7.0.0 through 7.0.3
- FortiAP-W2 version 7.2.0
- FortiAP-S version 6.0.0 through 6.0.6
- FortiAP-S version 6.2.0 through 6.2.6
- FortiAP-S version 6.4.0 through 6.4.7
- FortiAP version 6.0.0 through 6.0.6
- FortiAP version 6.4.3 through 6.4.7
- FortiAP version 7.0.0 through 7.0.3
- FortiAP version 7.2.0
- FortiOS version 6.0.0 through 6.0.14
- FortiOS version 6.2.0 through 6.2.11
- FortiOS version 6.4.0 through 6.4.9
- FortiOS version 7.0.0 through 7.0.5
- FortiOS version 7.2.0
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- https://www.fortiguard.com/psirt/FG-IR-22-073
- https://www.fortiguard.com/psirt/FG-IR-22-158
- https://www.fortiguard.com/psirt/FG-IR-21-163
- https://www.fortiguard.com/psirt/FG-IR-21-222
沒有留言:
發佈留言