4 ms·
Fortinet warns of auth bypass zero-day exploited to hijack firewalls
- bigfatkitten 2y agoFortinet must have the industry's most appalling record for RCE and auth bypass bugs in their admin interfaces. Just what you want from a 'security' vendor. https://www.cvedetails.com/vulnerability-list/vendor_id-3080/Fortinet.html https://www.cvedetails.com/vulnerability-list/vendor_id-3080...
- gnabgib 2y agoRelated Fortinet CVEs: Unauthenticated command injection (11 months ago) https://news.ycombinator.com/item?id=39286041 https://news.ycombinator.com/item?id=39286041 Unauthenticated remote code injection (2 years ago) https://news.ycombinator.com/item?id=36593967 https://news.ycombinator.com/item?id=36593967 XOR "Encryption" (with static key) (146 points, 5 years ago, 89 comments) https://news.ycombinator.com/item?id=21634835 https://news.ycombinator.com/item?id=21634835 SSH Backdoor (366 points, 9 years ago, 121 comments) https://news.ycombinator.com/item?id=10887981 https://news.ycombinator.com/item?id=10887981