Fortinet Updates
2882Warning Date
Severity Level
Warning Number
Target Sector
15 March, 2020
● High
2020-1019
All
Description:
Fortinet has released security updates to address several vulnerabilities in the following products:
- FortiClientVPNOnlineInstaller.exe for FortiClient VPN for Windows 6.2.3 and below
- FortiPresence 2.1.0 and below
- FortiWeb 6.2.0 and below.
- FortiWeb version 6.3.0.
- FortiWeb Versions 6.1.1 and below.
- FortiClientEMSOnlineInstaller.exe for FortiClient EMS 6.2.1 and below
- FortiManager 6.2.1 and below
- FortiIsolator version 1.2.2 and below.
- FortiWeb version 6.2.2 and below.
- FortiClient for Windows Versions 6.2.2 and below.
- FortiADC version 5.3.3 and below
- FortiClientOnlineInstaller.exe for FortiClient for Windows 6.2.3 and below
- FortiSIEM version 5.2.5 and below
- FortiWeb Versions 6.0.5 and below.
- FortiClientOnlineInstaller.exe for FortiClient for Windows 6.0.5 and below
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code
- Bypass of a protection mechanism
- Unauthorized disclosure of information
- Escalation of privilege
Best practice and Recommendations:
The CERT team encourages users to review Fortinet security advisory and apply the necessary updates:
- https://fortiguard.com/psirt/FG-IR-19-265
- https://fortiguard.com/psirt/FG-IR-19-270
- https://fortiguard.com/psirt/FG-IR-19-258
- https://fortiguard.com/psirt/FG-IR-19-281
- https://fortiguard.com/psirt/FG-IR-20-001
- https://fortiguard.com/psirt/FG-IR-19-220
- https://fortiguard.com/psirt/FG-IR-19-060
- https://fortiguard.com/psirt/FG-IR-19-269
- https://fortiguard.com/psirt/FG-IR-19-271
- https://fortiguard.com/psirt/%20FG-IR-19-240