Vulnerability in FortiOS Allows Local Attackers to Bypass Integrity Checks
CVE-2023-28002

5.8MEDIUM

Key Information:

Vendor

Fortinet
Status
FortiOS
Fortiproxy
Vendor
CVE Published:
14 November 2023

What is CVE-2023-28002?

An integrity check vulnerability in FortiOS versions allows a local attacker with administrative privileges to bypass the filesystem integrity checks. By exploiting this flaw, an attacker can boot a malicious image on the device, which could potentially lead to unauthorized system access and compromise the security of the affected systems. This vulnerability impacts various versions of FortiOS, underscoring the importance of applying security updates as they become available.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FortiOS 7.2.0 <= 7.2.3

FortiOS 7.0.0 <= 7.0.12

FortiOS 6.4.0 <= 6.4.15

References

https://fortiguard.com/psirt/FG-IR-22-396

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.