Fortinet FortiOS/FortiManager Tunnel Data Injection Vulnerability

Key Information Vulnerability Description Title: FortiOS - Improper authentication in fgfmd Description: A vulnerability that allows an unauthorized attacker to inject (but not receive) packets within tunnels established between FortiManager and target devices. Affected Scope Affected Versions: - FortiManager 7.4: 7.4.0 to 7.4.2 - FortiManager 7.2: 7.2.0 to 7.2.4 - FortiManager 7.0: 7.0.0 to 7.0.11 - FortiManager 6.4: 6.4.0 to 6.4.14 - FortiOS 7.6: Not affected - FortiOS 7.4: 7.4.0 to 7.4.3 - FortiOS 7.2: 7.2.0 to 7.2.7 - FortiOS 7.0: 7.0.0 to 7.0.14 - FortiOS 6.4: All versions - FortiOS 6.2: All versions - FortiOS 6.0: All versions - FortiPAM 1.3: Not affected - FortiPAM 1.2: All versions of 1.2 - FortiPAM 1.1: All versions of 1.1 - FortiPAM 1.0: All versions of 1.0 - FortiPortal 6.0: 6.0.0 to 6.0.14 - FortiPortal 5.3: All versions - FortiProxy 7.4: 7.4.0 to 7.4.2 - FortiProxy 7.2: 7.2.0 to 7.2.9 - FortiProxy 7.0: 7.0.0 to 7.0.16 - FortiProxy 2.0: All versions - FortiProxy 1.2: All versions of 1.2 - FortiProxy 1.1: All versions of 1.1 - FortiProxy 1.0: All versions of 1.0 - FortiSwitchManager 7.2: 7.2.0 to 7.2.3 - FortiSwitchManager 7.0: 7.0.0 to 7.0.3 Solution Recommended Upgrade: - FortiManager: 7.4.3 or later - FortiManager: 7.2.5 or later - FortiManager: 7.0.12 or later - FortiManager: 6.4.15 or later - FortiOS: 7.4.4 or later - FortiOS: 7.2.8 or later - FortiOS: 7.0.15 or later - FortiOS: 6.4 all versions - FortiOS: 6.2 all versions - FortiOS: 6.0 all versions - FortiPAM: 1.3 or later - FortiPAM: 1.2 or later - FortiPAM: 1.1 or later - FortiPAM: 1.0 or later - FortiPortal: 6.0.15 or later - FortiProxy: 7.4.4 or later - FortiProxy: 7.2.10 or later - FortiProxy: 7.0.17 or later - FortiProxy: 2.0 or later - FortiProxy: 1.2 or later - FortiProxy: 1.1 or later - FortiProxy: 1.0 or later - FortiSwitchManager: 7.2.4 or later - FortiSwitchManager: 7.0.4 or later Authentication Internal Discovery and Reporting: Discovered and reported by Gwendal Guégniaud from the Fortinet Product Security team. Timeline 2024-11-12: Initial release 2024-11-15: FortiProxy version 7.0.17 fix added Summary This vulnerability allows an unauthorized attacker to inject packets into tunnels established between FortiManager and target devices, although the attacker cannot receive data. A wide range of devices and versions are affected. Users running affected versions are advised to upgrade to the recommended versions as soon as possible to remediate this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

Fortinet FortiOS/FortiManager Tunnel Data Injection Vulnerability