Fortinet patches critical remote code execution and data leak flaws

Summary

Fortinet patched two critical vulnerabilities in FortiSIEM and FortiFone that allow unauthenticated attackers to execute remote code or steal configuration data.

Take Action:

Make sure your FortiSIEM and FortiFone devices or at least the critical ports are isolated from the internet and accessible from trusted networks only. Then plan an update ASAP.

---

Read the full article on BeyondMachines

---

This article was originally published on BeyondMachines