FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities

ronjor · Apr 2, 2021

Original release date: April 02, 2021

The Federal Bureau of Investigation (FBI) and CISA have released a Joint Cybersecurity Advisory (CSA) to warn users and administrators of the likelihood that advanced persistent threat (APT) actors are actively exploiting known Fortinet FortiOS vulnerabilities CVE-2018-13379, CVE-2020-12812, and CVE-2019-5591. APT actors may use these vulnerabilities or other common exploitation techniques to gain initial access to multiple government, commercial, and technology services. Gaining initial access pre-positions the APT actors to conduct future attacks.
Click to expand...

CISA encourages users and administrators to review Joint CSA AA21-092A: APT Actors Exploit Vulnerabilities to Gain Initial Access for Future Attacks and implement the recommended mitigations.
Click to expand...

ronjor · May 28, 2021

FBI Update on Exploitation of Fortinet FortiOS Vulnerabilities

Original release date: May 28, 2021
The Federal Bureau of Investigation (FBI) has released an FBI FLASH, APT Actors Exploiting Fortinet Vulnerabilities to Gain Access for Malicious Activity, which describes advanced persistent threat (APT) actors exploiting known Fortinet FortiOS vulnerabilities. APT actors may exploit these vulnerabilities to gain initial access to multiple government, commercial, and technology services to conduct future attacks. This is a follow up to the FBI-CISA Joint Cybersecurity Advisory AA21-092A: APT Actors Exploit Vulnerabilities to Gain Initial Access for Future Attack, originally published April 2, and provides indicators of compromise (IOCs) and additional recommended mitigations
Click to expand...

CISA encourages users and administrators to review the IOCs and updated mitigations in FBI FLASH MI-000148-MW and refer back to AA21-092A for additional information.
Click to expand...

Log in or Sign up

FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities

ronjor Global Moderator

ronjor Global Moderator

Useful Searches