Fortinet Confirms Zero-Day Vulnerability Exploited in One Attack

11-Oct-22

According to Fortinet, the significant vulnerability discovered last week is a zero-day issue that has been exploited in at least one assault. Last week, the business quietly alerted a few customers about the availability of fixes and remedies for an authentication bypass vulnerability that exposed FortiOS and FortiProxy devices to remote assaults. The vulnerability, identified as CVE-2022-40684, allows a remote, unauthenticated attacker to conduct unwanted activities on the affected appliance’s admin interface by sending specially crafted HTTP or HTTPS requests. Read More…