Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign

Cybersecurity researchers have discovered a new campaign that's exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun payloads.
The activity entails the exploitation of CVE-2023-48788 (CVSS score: 9.3), a critical SQL injection flaw that could permit an unauthenticated attacker to execute unauthorized code or

attacker campaign critical cve cve-2023-48788 cvss cvss score cybersecurity deploy devices exploit exploitation exploiting flaw forticlient forticlient ems fortinet hackers hackers exploit injection injection flaw metasploit payloads researchers score screenconnect security security flaw sql sql injection unauthenticated unauthorized