When you activate VPN on your device, it mainly provides the following benefits: “Fortinet has been actively advising and educating its customers about these vulnerabilities since first discovering them, urging them repeatedly to update their affected systems as soon as possible,” the company said in June.ĭue to FortiOS SSL VPN’s popularity with enterprise users, this can also be used to compromise network security.

Unless FortiOS SSL VPN passwords are changed since this scan, they can be compromised, according to Fortinet.

Its vulnerability was given a CVSS score of 9.8.ĭuring an attacker’s web scan for vulnerable devices, they got hold of the stolen info from “ systems that remained unpatched ” at the time, says Fortinet. Investigators concluded that the credential was obtained by exploiting CVE-2018-13379, a vulnerability that allows unauthenticated attackers to download system files via specially crafted HTTP resource requests. On September 2021, an attacker published credentials for 87,000 FortiGate SSL VPN devices online and created a huge threat to VPN Security by exploiting a known, old vulnerability.

Fortigate 2fa