Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs

Introduction On Thursday, 16 February 2022, Fortinet released a PSIRT that details CVE-2022-39952, a critical vulnerability affecting its FortiNAC product. This vulnerability, discovered by Gwendal Guégniaud of Fortinet, allows an unauthenticated attacker to write arbitrary files on the system and as a result obtain remote code execution in the context of the root user. Extracting […]

The post Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs appeared first on Horizon3.ai.

The post Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs appeared first on …

blog code code execution context critical critical vulnerability cve cve-2022-39952 dive february files fortinac fortinet fortinet fortinac horizon3 horizon3.ai introduction iocs product psirt red team remote code remote code execution result root social engineering system vulnerability