Security Advisory – Vulnerabilities in Fortinet

In Feb 2024, Fortigate patched 2 vulnerabilities in various devices one of which has been reported to be exploited in the wild.

CVE-2024-21762

This is an out-of-bound write vulnerability in the sslvpnd daemon, which could allow a remote unauthenticated attacker to execute arbitrary commands and code on the device. As its name suggests, sslvpnd daemon is responsible for SSL VPN connections. This vulnerability has been reported to be exploited in the wild and has a CVSS score of 9.6.

This …

advisory attacker code cve cve-2024 cve-2024-21762 daemon device devices exploited fortigate fortinet in the wild malware analysis name security security advisory sslvpnd unauthenticated vulnerabilities vulnerability