New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote Access

Mar 09, 2023Ravie LakshmananNetwork Security / Firewall

Fortinet has launched fixes to tackle 15 safety flaws, together with one important vulnerability impacting FortiOS and FortiProxy that might allow a menace actor to take management of affected methods.

The concern, tracked as CVE-2023-25610, is rated 9.3 out of 10 for severity and was internally found and reported by its safety groups.

“A buffer underwrite (‘buffer underflow’) vulnerability in FortiOS and FortiProxy administrative interface might enable a distant unauthenticated attacker to execute arbitrary code on the gadget and/or carry out a DoS on the GUI, by way of particularly crafted requests,” Fortinet stated in an advisory.

Underflow bugs, additionally known as buffer underruns, happen when the enter knowledge is shorter than the reserved house, inflicting unpredictable conduct or leakage of delicate knowledge from reminiscence.

Other attainable penalties embrace reminiscence corruption that might both be weaponized to induce a crash or execute arbitrary code.

Fortinet stated it is not conscious of any malicious exploitation makes an attempt towards the flaw. But provided that prior flaws in software program have come below energetic abuse within the wild, it is important that customers transfer shortly to use the patches.

The following variations of FortiOS and FortiProxy are impacted by the vulnerability –

• FortiOS model 7.2.0 via 7.2.3
• FortiOS model 7.0.0 via 7.0.9
• FortiOS model 6.4.0 via 6.4.11
• FortiOS model 6.2.0 via 6.2.12
• FortiOS 6.0 all variations
• FortiProxy model 7.2.0 via 7.2.2
• FortiProxy model 7.0.0 via 7.0.8
• FortiProxy model 2.0.0 via 2.0.11
• FortiProxy 1.2 all variations
• FortiProxy 1.1 all variations

Fixes can be found in FortiOS variations 6.2.13, 6.4.12, 7.0.10, 7.2.4, and seven.4.0; FortiOS-6K7K variations 6.2.13, 6.4.12, and seven.0.10; and FortiProxy variations 2.0.12, 7.0.9, and seven.0.9.

As workarounds, Fortinet is recommending that customers both disable the HTTP/HTTPS administrative interface or restrict IP addresses that may attain it.

The disclosure comes weeks after the community safety firm issued fixes for 40 vulnerabilities, two of that are rated Critical and affect FortiNAC (CVE-2022-39952) and FortiWeb (CVE-2021-42756) merchandise.