Fortinet Warns of Zero Day in FortiOS

Fortinet has released fixes for a critical remote code execution vulnerability in many versions of its FortiOS software that may be under active attack at the moment.

The vulnerability (CVE-2024-21762) is an out-of-bounds write in the sslvpnd component of the software, and it affects FortiOS 6.0, 6.2, 6.4, 7.0, 7.2, and 7.4. Fortinet released an advisory warning of the vulnerability on Thursday and urged customers to upgrade to the latest versions as soon as possible.

“A out-of-bounds write vulnerability in …

attack code code execution critical cve fixes fortinet fortios may out-of-bounds out-of-bounds write remote code remote code execution software sslvpnd under vulnerability