Actively exploited vulnerability

CVE-2022-41328: Fortinet FortiOS Path Traversal Vulnerability

Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.

CISA KEV source 14 Mar 2023 added 4 Apr 2023 remediation due

Fortinet · FortiOS

Known ransomware use: Unknown

Apply updates per vendor instructions.

Bleeping Computer17 Mar 2023

Fortinet zero-day attacks linked to suspected Chinese hackers

A suspected Chinese hacking group has been linked to a series of attacks on government organizations exploiting a Fortinet zero-day vulnerability (CVE-2022-41328) to deploy malware. [...]

CVE-2022-41328: Fortinet FortiOS Path Traversal Vulnerability

Affected product

Required action

Related Yasna coverage

Fortinet zero-day attacks linked to suspected Chinese hackers