Fortinet Products Multiple Vulnerabilities

Release Date: 7 Sep 2022 5458 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities were identified in Fortinet Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, cross-site scripting and security restriction bypass on the targeted system.

Impact

Denial of Service
Remote Code Execution
Cross-Site Scripting
Security Restriction Bypass

System / Technologies affected

FortiAP-U version 5.4.0 through 5.4.6
FortiAP-U version 6.0.0 through 6.0.4
FortiAP-U version 6.2.0 through 6.2.3
FortiAP-W2 version 6.0.0 through 6.0.6
FortiAP-W2 version 6.2.0 through 6.2.6
FortiAP-W2 version 6.4.0 through 6.4.7
FortiAP-W2 version 7.0.0 through 7.0.3
FortiAP-W2 version 7.2.0
FortiAP-S version 6.0.0 through 6.0.6
FortiAP-S version 6.2.0 through 6.2.6
FortiAP-S version 6.4.0 through 6.4.7
FortiAP version 6.0.0 through 6.0.6
FortiAP version 6.4.3 through 6.4.7
FortiAP version 7.0.0 through 7.0.3
FortiAP version 7.2.0
FortiOS version 6.0.0 through 6.0.14
FortiOS version 6.2.0 through 6.2.11
FortiOS version 6.4.0 through 6.4.9
FortiOS version 7.0.0 through 7.0.5
FortiOS version 7.2.0

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Fortinet