{"id":809,"date":"2022-12-13T15:37:19","date_gmt":"2022-12-13T15:37:19","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/kriticna-ranjivost-fortinet-fortios-sslvpnd-cve-2022-42475\/"},"modified":"2026-11-04T08:48:33","modified_gmt":"2026-11-04T08:48:33","slug":"kriticna-ranjivost-fortinet-fortios-sslvpnd-cve-2022-42475","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/kriticna-ranjivost-fortinet-fortios-sslvpnd-cve-2022-42475\/","title":{"rendered":"Kriti\u010dna ranjivost Fortinet FortiOS sslvpnd (CVE-2022-42475)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Otkrivena je kriti\u010dna ranjivost u Fortinet FortiOS sslvpnd sustavu<\/strong> koja potencijalnom udaljenom neovla\u0161tenom napada\u010du omogu\u0107uje proizvoljno izvr\u0161avanje programskog koda ili naredbi putem posebno oblikovanih zahtjeva.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Fortinet je potvrdio da se ranjivost ve\u0107 iskori\u0161tava.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Savjete Fortineta mo\u017eete pro\u010ditati na: <a href=\"https:\/\/www.fortiguard.com\/psirt\/FG-IR-22-398\"><strong>https:\/\/www.fortiguard.com\/psirt\/FG-IR-22-398<\/strong><\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ranjivi sustavi:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS ina\u010dice 7.2.0 do 7.2.2<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS ina\u010dice 7.0.0 do 7.0.8<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS ina\u010dice 6.4.0 do 6.4.10<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS ina\u010dice 6.2.0 do 6.2.11<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS-6K7K ina\u010dice 7.0.0 do 7.0.7<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS-6K7K ina\u010dice 6.4.0 do 6.4.9<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS-6K7K ina\u010dice 6.2.0 do 6.2.11<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS-6K7K ina\u010dice 6.0.0 do 6.0.14<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iskori\u0161tavanje ove ranjivosti napada\u010du omogu\u0107uje udaljeno izvr\u0161avanje k\u00f4da, kra\u0111u podataka, izvr\u0161avanje DoS napada, <em>ransomware <\/em>ili ometanje rada sustava.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Poznati su sljede\u0107i indikatori kompromitacije:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Vi\u0161estruko pojavljivanje zapisa s:<ul><li>Logdesc=\"Application crashed\" and msg=\"[...] application:sslvpnd,[...],<br>Signal 11 received, Backtrace: [...]\u201c<\/li><\/ul><\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Prisutnost sljede\u0107ih datoteka u sustavu:<ul><li>\/data\/lib\/libips.bak<\/li><\/ul><ul><li>\/data\/lib\/libgif.so<\/li><\/ul><ul><li>\/data\/lib\/libiptcp.so<\/li><\/ul><ul><li>\/data\/lib\/libipudp.so<\/li><\/ul><ul><li>\/data\/lib\/libjepg.so<\/li><\/ul><ul><li>\/var\/.sslvpnconfigbk<\/li><\/ul><ul><li>\/data\/etc\/wxd.conf<\/li><\/ul><ul><li>\/flash<\/li><\/ul><\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Spajanje sustava na sumnjive FortiGate IP adrese:<ul><li>188[.]34.130.40:444<\/li><\/ul><ul><li>103[.]131.189.143:30080,30081,30443,20443<\/li><\/ul><ul><li>192[.]36.119.61:8443,444<\/li><\/ul><ul><li>172[.]247.168.153:8033<\/li><\/ul><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>PREPORUKE:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS ina\u010dice 7.2.0 do 7.2.2 nadogradite na FortiOS ina\u010dicu 7.2.3 ili noviju<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS ina\u010dice 7.0.0 do 7.0.8 nadogradite na FortiOS ina\u010dicu 7.0.9 ili noviju<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS ina\u010dice 6.4.0 do 6.4.10 nadogradite na FortiOS ina\u010dicu 6.4.11 ili noviju<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS ina\u010dice 6.2.0 do 6.2.11 nadogradite na FortiOS ina\u010dicu 6.2.12 ili noviju<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS-6K7K ina\u010dice 7.0.0 do 7.0.7 nadogradite na FortiOS-6K7K ina\u010dicu 7.0.8 ili noviju<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS-6K7K ina\u010dice 6.4.0 do 6.4.9 nadogradite na FortiOS-6K7K ina\u010dicu 6.4.10 ili noviju<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS-6K7K ina\u010dice 6.2.0 do 6.2.11 nadogradite na FortiOS-6K7K ina\u010dicu 6.2.12 ili noviju<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 FortiOS-6K7K ina\u010dice 6.0.0 do 6.0.14 nadogradite na FortiOS-6K7K ina\u010dicu 6.0.15 ili noviju<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ranjivost ne zahva\u0107a sustave koji imaju onemogu\u0107enu VPN-SSL funkcionalnost.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tako\u0111er, provjerite zapise kako biste se uvjerili da nije ostvaren neovla\u0161teni pristup sustavu te implementirajte uvjetovana pravila pristupa (npr. GeoIP blokiranje) kako biste umanjili izlo\u017eenost napadu.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Otkrivena je kriti\u010dna ranjivost u Fortinet FortiOS sslvpnd sustavu koja potencijalnom udaljenom neovla\u0161tenom napada\u010du omogu\u0107uje proizvoljno izvr\u0161avanje programskog koda ili naredbi putem posebno oblikovanih zahtjeva. Fortinet je potvrdio da se ranjivost ve\u0107 iskori\u0161tava. Savjete Fortineta mo\u017eete pro\u010ditati na: https:\/\/www.fortiguard.com\/psirt\/FG-IR-22-398 Ranjivi sustavi: \u2022 FortiOS ina\u010dice 7.2.0 do 7.2.2 \u2022 FortiOS ina\u010dice 7.0.0 do 7.0.8 \u2022 FortiOS [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1272,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-809","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/809","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=809"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/809\/revisions"}],"predecessor-version":[{"id":1276,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/809\/revisions\/1276"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1272"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=809"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=809"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=809"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=809"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=809"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}