Kevin Beaumont on Nostr: A small number of the devices are on Fortigate 7.2, versions from late 2022 - which ...
A small number of the devices are on Fortigate 7.2, versions from late 2022 - which tends to blow the recent CVE out of the water as that's not supposed to be impacted.
I've confirmed one of the usernames and passwords with one of the victims a friend works at. Impacted orgs are going to need to change local SSL VPN passwords, admin passwords etc.
Published at
2025-01-15 23:59:45Event JSON
{
"id": "e30ae5fd0bb7216335a9481f7a416c65f9d839065a7945b93c8d7a42f9f2d5b3",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1736985585,
"kind": 1,
"tags": [
[
"e",
"8ca076f9f1fb85f001d508d1e728f0c6474bdd54c72048a20f043a2d390be999",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/113835087320560714",
"activitypub"
]
],
"content": "A small number of the devices are on Fortigate 7.2, versions from late 2022 - which tends to blow the recent CVE out of the water as that's not supposed to be impacted.\n\nI've confirmed one of the usernames and passwords with one of the victims a friend works at. Impacted orgs are going to need to change local SSL VPN passwords, admin passwords etc.",
"sig": "1e8ddfd6eda7eab97bde316a231f8fc66231d9b84642cd988c4340258e38277c194911dfa3b4779acc9f2261168f7d3add309b9da5b311e66c100f4f1c2097ed"
}
