Cybercriminals are actively exploiting a new critical vulnerability in FortiOS SSL VPN. An update is available.

Hackers are exploiting a major advantage of FortiOS SSL VPN. The vulnerability (CVE-2024-21762) receives a score of 9.6 and is therefore critical. It includes a outside the bordersWrite a security vulnerability in FortiOS that allows unauthorized attackers to execute proprietary malicious code, with potentially dramatic consequences.

Vulnerable versions

FortiOS 7.6 is not vulnerable to the bug. If you are already using the latest version of the software, you don’t have to worry about anything. The following releases are available and should therefore be patched as soon as possible:

If patching doesn’t work, you can temporarily close the leak by disabling SSL VPN on vulnerable FortiOS devices. While Fortinet says the flaw is being actively exploited, it does not provide any information about how or to what extent. It is also unclear who discovered the vulnerability.

Interesting goal

Fortinet is an interesting target for attackers because a vulnerability could allow access to the larger corporate network. This is interesting, for example, for ransomware attacks. Recently, it emerged that FortiSIEM is also vulnerable to hacker attacks due to critical flaws. Fortinet also offers updates for this.