Fortinet has released a security update aimed at addressing a vulnerability that affects their range of appliances, denoted as CVE-2023-29182.

Affected Systems

The following systems are affected:

• FortiOS version:7.0.0 through 7.0.3.

• FortiOS Version: 6.4 (all versions).

• FortiOS Version: 6.2 (all versions).

Security Risks

The successful exploitation of the vulnerability (CVE-2023-29182) within FortiOS could potentially grant remote attackers control over compromised systems, presenting a significant and concerning security risk.

Recommended Actions

The National Cyber Security Authority (NCSA) strongly recommends to system administrators to:

• Follow Fortinet Security Advisories to lower the risk of potential exploits, protect systems, and ensure their security.

• Apply the required and latest security updates as soon as possible.

     The released software version to upgrade to are:

• FortiOS version 7.4.0 or above.

• FortiOS version 7.2.0 or above.

• FortiOS version 7.0.4 or above.

• Before any update task, please ensure you have a recent backup that can easily be restored.

For further information and support, please contact NCSA by email at rwcsirt@ncsa.gov.rw or call us on 9009.

References

• https://www.fortiguard.com/psirt/FG-IR-23-149