Fortinet FortiOS, FortiProxy, FortiManager, and FortiAnalyzer Cloud Weak Authentication Vulnerability Allowing Unauthorized Code Execution

A vulnerability exists in Fortinet FortiOS (versions 7.4.0 to 7.4.4, 7.2.0 to 7.2.8, 7.0.0 to 7.0.15, 6.4.0 to 6.4.15), FortiProxy (versions 7.4.0 to 7.4.4, 7.2.0 to 7.2.10, 7.0.0 to 7.0.17, 2.0.0 to 2.0.14), FortiManager (versions 7.6.0 to 7.6.1, 7.4.1 to 7.4.3) and FortiAnalyzer Cloud (versions 7.4.1 to 7.4.3). The vulnerability arises from weak authentication, allowing attackers to execute unauthorized code or commands through brute-force attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution or command execution on the affected device.