FortiOS
Security incidents tagged FortiOS. Newest first.
0 FortiOS incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 986
- Longest quiet run: 986 days (Feb 10–Oct 22)
Show 2 older incidents2 older incidents
February 2024 1
CriticalFortinet FortiOS Out-of-Bound WritePatched
Fortinet FortiOS Patched
Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests. Added to the CISA KEV catalog on 2024-02-09. CISA lists known use in ransomware campaigns.
Open incident →CVE-2024-21762
June 2023 1
CriticalFortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997)Patched
Fortinet FortiOS and FortiProxy SSL-VPN Patched
A heap overflow in the FortiOS and FortiProxy SSL-VPN allowed pre-authentication remote code execution. Fortinet said it may have been exploited in a limited number of cases, and published it alongside its analysis of the Volt Typhoon campaign.
Open incident →CVE-2023-27997
