Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability

ronjor · Oct 30, 2024

Release Date October 30, 2024

Fortinet has updated their security advisory addressing a critical FortiManager vulnerability (CVE-2024-47575) to include additional workarounds and indicators of compromise (IOCs). A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive files or take control of an affected system. At this time, all patches have been released.
Click to expand...

CISA previously added this vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation, as confirmed by Fortinet.
Click to expand...

CISA strongly encourages users and administrators to apply the necessary updates, hunt for any malicious activity, assess potential risk from service providers, report positive findings to CISA, and review the following articles for additional information:
Click to expand...

Fortinet Advisory FG-IR-24-423
CISA alert on the Fortinet FortiManager Missing Authentication Vulnerability
Google Threat Intelligence article Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575).
Click to expand...

Log in or Sign up

Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability

ronjor Global Moderator

Log in or Sign up

Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability

ronjor Global Moderator

Useful Searches