Vulnerable software · Scan · first seen 12 Oct · CVE-2024-21762
CriticalLikelyNewKelvin Obisesanfix by 19 Oct
New · with Kelvin
The VPN has no owner yet: it's waiting in Discovered. Access to it is for sale on the dark web.
One problem in one place, found by scan.
1 source · 1 place
Scan
First found Mon 12 Oct
What closes it
Nobody can mark it fixed by hand. A person submits the fix; a scan or a retest decides it.
4th of 39 in your queue
Proof first, then exploitation in the wild, a public exploit, EPSS and severity, adjusted for exposure and how much the asset matters
Priority
88 / 100
What each source saw
As each source gives it · secrets, keys and card numbers stay masked
The scan's case file · tessellatepay.com
See it in that scanWhy it matters here
On CISA's list of vulnerabilities attackers are using now. It's your VPN, so code run here is inside your network. We tried to prove it and the template didn't fire, which doesn't mean it's safe: FortiGate often answers differently to unauthenticated probes.
Proof
That doesn’t mean it’s safe. The template may need a signed-in session, or the device may answer probes differently. Treat the version as the evidence.
What we saw
vpn.tessellatepay.com shows FortiOS 7.0.12, a version this advisory covers. We matched the version; the proof, where there is one, is above.
The advisory
A out-of-bounds write in Fortinet FortiOS allows a remote unauthenticated attacker to execute arbitrary code or command via specially crafted HTTP requests.
The fix
Upgrade FortiOS to 7.0.14 or later, or turn off SSL VPN until you can. Then check the device for signs of compromise from before the upgrade.
Where
Detected
FortiOS 7.0.12
cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*
How likely
What happened, and what was said
1 event · 0 comments · oldest first
One finding belongs with this one
The same story from another source: fix them together