Fortinet FortiOS Externally-Controlled Format String Vulnerability Allowing Unauthorized Code Execution

A vulnerability allowing the use of externally-controlled format strings has been identified in Fortinet FortiOS versions 7.6.0 to 7.6.4, 7.4.0 to 7.4.9, 7.2.0 to 7.2.11, and all versions of 7.0. This vulnerability allows an authenticated admin to execute unauthorized code or commands by using specially crafted configuration.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution or command execution on the affected device.

Remediation

Users can upgrade Fortinet FortiOS to version 7.6.5 or above, 7.4.10 or above, or migrate to a fixed release for FortiOS 7.2 and 7.0. A virtual patch named 'FG-VD-59445.0day' is also available in FMWP db update 26.010.