FortiOS and FortiSwitchManager Vulnerability Let Remote Attackers Execute Arbitrary Code

Fortinet has disclosed a critical heap-based buffer overflow vulnerability (CWE-122) in the cw_acd daemon of FortiOS and FortiSwitchManager. This flaw enables a remote, unauthenticated attacker to execute arbitrary code or commands by sending specially crafted requests over the network. Organizations relying on Fortinet’s firewalls, secure access service edge (SASE) solutions, and switch management tools face […]

The post FortiOS and FortiSwitchManager Vulnerability Let Remote Attackers Execute Arbitrary Code appeared first on Cyber Security News.

This article has been indexed from Cyber Security News

Read the original article: