Fortinet has released updates to fix multiple vulnerabilities in its products. Vulnerabilities were identified in the FortiManager, FortiAnalyzer, FortiOS, FortiProxy, FortiSwitchManager, FortiTester products. A malicious actor could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege and security restriction bypass on the targeted system. Fortinet also reports that a critical authentication bypass vulnerability (CVE-2022-40684) in FortiOS, FortiProxy and FortiSwitchManager is likely to be exploited in the wild. To address this flaw, Fortinet released fixes and workarounds.

More information on vulnerabilities and updates is available in Fortinet security advisories – fortinet.com.