The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.0.0 through 7.0.7, 6.4.0 through 6.4.9, 6.2 all versions, 6.0 all versions and FortiProxy SSH login component 7.0.0 through 7.0.5, 2.0.0 through 2.0.10, 1.2.0 all versions may allow a remote and unauthenticated attacker to login into the device via sending specially crafted Access-Challenge response from the Radius server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.0.7Upgrade FortiProxy to 2.0.11 | Sep 30, 2026 | Dec 6, 2022 |
| Fortios | — | Upgrade FortiOS to 7.0.8Upgrade to the latest version of FortiOSUpgrade FortiOS to 6.2.13Upgrade FortiOS to 6.4.10Upgrade FortiOS to 7.2.2 | Dec 12, 2022 | Dec 6, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub