Alert: Fortinet Security Updates – January 2024

Fortinet has issued a security update to rectify a vulnerability in FortiOS and FortiProxy software, specifically addressing an actively exploited zero-day CVE-2023-44250.

Affected Systems

The following systems are affected:

• FortiOS version:7.4.0 through 7.4.1.
• FortiOS Version: 7.2.5.
• FortiProxy Version: 7.4.0 through 7.4.1.

Security Risks

Successfully exploiting a vulnerability in FortiOS and FortiProxy software poses a significant security risk, allowing cyber threat actors to gain unauthorized control over affected systems.

Recommended Actions

The National Cyber Security Authority (NCSA) strongly recommends to system administrators to:

• Follow Fortinet Security Advisories to lower the risk of potential exploits, protect systems, and ensure their security.
• Apply the required and latest security updates as soon as possible.

     The released software version to upgrade to are:

• FortiOS version: 7.4.2 or above.
• FortiOS version: 7.2.6 or above.
• FortiProxy version: 7.4.2 or above.
• Before any update task, please ensure you have a recent backup that can easily be restored.

For further information and support, please contact NCSA by email at rwcsirt@ncsa.gov.rw or call us on 9009.

References

https://www.fortiguard.com/psirt/FG-IR-23-315