Fortinet Update
3040Warning Date
Severity Level
Warning Number
Target Sector
26 February, 2020
● High
2020-956
All
Description:
Fortinet has released security update to address a vulnerability in the following product:
- FortiOS when using the following IPS Engine versions:
- IPS engine version 5.00000 to 5.00006
- IPS engine version 4.00000 to 4.00036
- IPS engine version 4.00200 to 4.00219
- IPS engine version 3.00547 and below
Threats:
Attacker could exploit this vulnerability by deciphering TLS connections going through the FortiGate by monitoring the traffic.
Best practice and Recommendations:
The CERT team encourages users to review Fortinet security advisory and apply the necessary updates: