Host · tessellatepay.com · Internal · criticality A
200 · FortiGate SSL VPN · Lagos · MainOne Cable Company · 3 open issues · first seen Mon 12 Oct · last scanned Mon 12 Oct · scanning now, since 10:19
CVE-2024-21762 · on CISA's exploited list
On CISA's list of vulnerabilities attackers are using now. It's your VPN, so code run here is inside your network. We tried to prove it and the template didn't fire, which doesn't mean it's safe: FortiGate often answers differently to unauthenticated probes.
What to fix on it first
3 issues · ranked by proof, then exploitation in the wild, then severity
Being exploited in the wild · 1
Everything else, worst first · 2
Who gets its findings, and how much it matters
Owner routes findings · criticality moves them up the queue
Owner
We'd suggest Platform: they run the office network, and FortiGate is network kit
What it's for
Meant for staff only
Criticality
Money moves or customer data lives here
What answers, from where, running what
As the last finished scan saw it
On the web
How it meets the internet
Straight onto the internet
Its own address answers. Whatever it runs, attackers reach directly.
Runs
What it offers anyone who asks
Open ports, the headers its pages send, the routes we know
Ports
Headers