Oct 23, 2024
2 new incidents, 0 with updates.
Started
- ClosedPatched
FortiManager 'FortiJump' missing authentication zero-day (CVE-2024-47575)
Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. Added to the CISA KEV catalog on 2024-10-23.
Fortinet FortiManagerClosed Oct 23, 2024
- ClosedPatched
Cisco ASA and FTD Denial-of-Service
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service. Added to the CISA KEV catalog on 2024-10-24.
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Closed Oct 24, 2024
