Non-endpoint Vulnerability in Fortinet FortiOS and FortiProxy

CVE-2024-50568

What is CVE-2024-50568?

A vulnerability has been identified in Fortinet's FortiOS and FortiProxy, where an unauthenticated attacker can exploit the system by spoofing the identity of a downstream device within the security fabric. This is achieved through crafted TCP requests, targeting specific device data. Multiple versions of the affected products are vulnerable, making it critical for users to ensure their installations are updated to mitigate potential security risks.

References