Vulnerabilitycritical

Fortinet fixes critical vulnerabilities in FortiNAC and FortiWeb

Security Affairsby @securityaffairsFeb 17, 2023 · 15:09 UTC (Feb 17, 2023)1 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-39952 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-39952 CVE-2021-42756

Tags: cve-2022-39952 cve-2021-42756 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-42756	Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and…	9.8	35%		Feb 16, 2023
CVE-2022-39952	A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through…	9.8	100%		Feb 16, 2023

From the original article

1 min read at securityaffairs.com

Cybersecurity vendor Fortinet has addressed two critical vulnerabilities impacting its FortiNAC and FortiWeb products. Cybersecurity firm Fortinet has released security updates to address two critical vulnerabilities in FortiNAC and FortiWeb solutions.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.