Skip to main navigation Skip to main content Skip to page footer

Security Alert: Critical Remote Code Execution Vulnerabilities in PHP

Data Protection Office
Contact us Report an incident
Data Protection Office
Contact us Report an incident

Alert: Fortinet Security Updates – January 2025

Fortinet has released a security update to address multiple vulnerabilities in its products. One of these vulnerabilities, identified as CVE-2024-55591, impacts FortiOS, FortiProxy, and other related products.

 

Affected Systems:

  • FortiOS Versions: 7.0.0 to 7.0.16
  • FortiProxy Versions: 7.0.0 to 7.2.12

 

Security Risks

 

The successful exploitation of vulnerabilities in Fortinet software poses a significant security risk, enabling cyber threat actors to gain unauthorized control over affected systems.

 

For a complete list of the security patches released by Fortinet, please refer to the official Fortinet security advisory.

 

Recommended Actions

 

The National Cyber Security Authority (NCSA) strongly recommends to system administrators to:

1. Follow Fortinet Security Advisory FG-IR-24-535 to lower the risk of potential exploits, protect systems, and ensure their security.

2. Apply the required and latest security updates as soon as possible.

The released software versions for upgrade include, but are not limited to:

  • FortiOS 7.0       7.0.0 through 7.0.16      Upgrade to 7.0.17 or above
  • FortiProxy 7.2   7.2.0 through 7.2.12      Upgrade to 7.2.13 or above
  • FortiProxy 7.0   7.0.0 through 7.0.19      Upgrade to 7.0.20 or above

 

3. Before any update task, please ensure you have a recent backup that can easily be restored.


For further information and support, please contact NCSA by email at rwcsirt@ncsa.gov.rw or call us on 9009.

 

References