Vulnerabilityhigh

APT hacked a US municipal government via an unpatched Fortinet VPN

Security Affairsby @securityaffairsMay 27, 2021 · 21:25 UTC (May 27, 2021)1 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2018-13379 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-13379 CVE-2020-12812 CVE-2019-5591

Tags: cve-2018-13379 cve-2020-12812 cve-2019-5591 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2019-5591	Default-Configuration LDAP Impersonation in Fortinet FortiOS	6.5	19%	KEVRansomware	Aug 14, 2020 KEV Nov 3, 2021
CVE-2020-12812	MFA Bypass via Username Case Change in Fortinet FortiOS SSL VPN	9.8	45%	KEVRansomware	Jul 24, 2020 KEV Nov 3, 2021

From the original article

1 min read at securityaffairs.com

The FBI revealed that foreign hackers compromised the network of a local US municipal government by exploiting flaws in an unpatched Fortinet VPN. The Federal Bureau of Investigation (FBI) reported that an APT group had breached the network of a local US municipal government by exploiting vulnerabilities in an unpatched Fortinet VPN.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.