Tag: CERT

Jun 13

Critical FortiOS & FortiProxy – Heap buffer overflow Vulnerability

By Christopher GLEMOT in CERT, Vulnerability Management

Critical FortiOS – FG-IR-23-097: Fortinet released security updates to address a heap-based buffer overflow vulnerability [CVE-2023-27997] in FortiOS. An attacker could exploit this vulnerability to take control of an affected system. Hackers are actively exploiting the latest Fortinet’s FortiOS and FortiProxy flaw, targeting government, manufacturing, and critical infrastructure sectors. Take immediate action and update to …

CERT, CVE-2023-27997, FG-IR-23-097, Fortinet, FortiOS, FortiProxy, Infosec

Oct 27

Critical OpenSSL Vulnerability version 3.0

By Christopher GLEMOT in CERT, Cybersecurity, Ransomware, Security, Zero Day

Updated (October 27th, 2022): List of vendors and software affected by the OpenSSL vulnerability here. Critical OpenSSL Vulnerability version 3.0 and above: OpenSSL has just announced a critical vulnerability in version 3.x. This access vulnerability requires access to private keys and/or risks remote machine access (RCE). Vulnerabilities that can be easily exploited remotely to compromise …