Fortinet has released security updates that address 40 vulnerabilities in its software line-up including FortiWeb, FortiOS, FortiNAS and FortiProxy.
Of the 40 defects, 2 are rated critical, 15 are rated high, 22 are rated medium, and 1 is rated low.
At the top of the list is a critical bug (CVE-2022-39952, CVSS score: 9.8) in the FortiNAC network access control solution that could lead to the execution of arbitrary code.
“External control of file name or path vulnerabilities [CWE-73] The FortiNAC web server could allow an unauthenticated attacker to perform arbitrary writes to the system,” Fortinet said in an advisory earlier this week.
Products affected by this vulnerability are:
- FortiNAC Version 9.4.0
- FortiNAC versions 9.2.0 through 9.2.5
- FortiNAC versions 9.1.0 through 9.1.7
- FortiNAC 8.8 All Versions
- FortiNAC 8.7 All versions
- FortiNAC 8.6 All versions
- FortiNAC 8.5 all versions, and
- FortiNAC 8.3 All Versions
Patches have been released for FortiNAC versions 7.2.0, 9.1.8, 9.1.8, and 9.1.8. Penetration testing company Horizon3.ai Said The company plans to release proof-of-concept (PoC) code for this flaw “soon,” and it’s imperative that users act quickly to apply the update.
The second flaw of note is a series of stack-based buffer overflows in FortiWeb’s proxy daemon (CVE-2021-42756, CVSS score: 9.3) that could allow an unauthenticated, remote attacker to be specially crafted. could potentially execute arbitrary code via HTTP requests.
CVE-2021-42756 affects the following versions of FortiWeb and fixes are available for versions FortiWeb 6.0.8, 6.1.3, 6.2.7, 6.3.17 and 7.0.0 –
- FortiWeb version 6.4 all versions
- FortiWeb version 6.3.16 and below
- FortiWeb version 6.2.6 and below
- FortiWeb version 6.1.2 and below
- FortiWeb version 6.0.7 and below, and
- FortiWeb version 5.x all versions
According to Fortinet, the two flaws were discovered internally and reported by the product security team. Interestingly, CVE-2021-42756 also appears to have been identified in 2021, but has not been disclosed to date.
