The company did not provide any further context about the known exploitation of the vulnerability (CVE-2022-42475). The company has released updates for all of the affected versions and is encouraging all affected customers to upgrade as soon as possible. FortiGate Report Firebox Report SonicWall Report PaloAlto Networks. “Fortinet is aware of an instance where this vulnerability was exploited in the wild.” With the demo version, you can also create a free report with your own configuration. “A heap-based buffer overflow vulnerability in FortiOS SSL-VPN may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests,” the Fortinet advisory says.

The company said on Monday that the vulnerability affects a number of versions of FortiOS, the operating system for its FortiGuard appliances, and is in the SSL VPN functionality of the appliances. FortiGate-VM on Google Cloud delivers next generation firewall and SD-WAN capabilities for organizations of all sizes, with the flexibility to be deployed. Many versions of Fortinet’s popular Fortigate firewall have a heap buffer overflow vulnerability that attackers have already exploited in the wild.

Fort igate