Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113)

Help Net Securityby @zeljkazorz ()2 min read2
Analyze CVE-2024-23113 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-23113
Format String Vulnerability Enables Unauthenticated RCE in Fortinet FortiOS and FortiProxy
9.862%KEV
KEV

From the original article

2 min read at helpnetsecurity.com

Last week, CISA added CVE-2024-23113 – a critical vulnerability that allows unauthenticated remote code/command execution on unpatched Fortinet FortiGate firewalls – to its Known Exploited Vulnerabilities catalog, thus confirming that it’s being leveraged by attackers in the wild. The Shadowserver Foundation shared on Sunday that there are still 87,000+ internet-facing Fortinet devices likely vulnerable to the flaw.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.