{"id":895,"date":"2024-02-09T14:53:57","date_gmt":"2024-02-09T14:53:57","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/fortinet-kriticne-ranjivosti\/"},"modified":"2026-11-04T08:48:34","modified_gmt":"2026-11-04T08:48:34","slug":"fortinet-kriticne-ranjivosti","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/fortinet-kriticne-ranjivosti\/","title":{"rendered":"FORTINET KRITI\u010cNE RANJIVOSTI"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Otkrivene su kriti\u010dne ranjivosti u Fortinet FortiOS SSL VPN-u:<\/strong>&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-21762\">CVE-2024-21762<\/a> (CVSS 9.8)<\/strong> \u2013 omogu\u0107uje udaljenom, neautentificiranom napada\u010du izvr\u0161avanje proizvoljnog programskog k\u00f4da ili naredbi putem posebno oblikovanih HTTP zahtjeva.\u00a0<\/li><li><strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-23113\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2024-23113<\/a> (CVSS 9.8)<\/strong> \u2013 ranjivost u FortiOS fgfmd servisu koja omogu\u0107ava udaljenom, neautentificiranom napada\u010du izvr\u0161avanje proizvoljnog programskog k\u00f4da ili naredbi putem slanja posebno oblikovanih zahtjeva.\u00a0<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Fortinet je napomenuo da se ranjivost CVE-2024-21762 ve\u0107 potencijalno iskori\u0161tava. <\/strong>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iskori\u0161tavanje navedenih ranjivosti Fortineta mo\u017ee dovesti do ransomware napada ili kiberneti\u010dke \u0161pijuna\u017ee.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Savjete Fortineta mo\u017eete pro\u010ditati na:\u202f&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/www.fortiguard.com\/psirt\/FG-IR-24-015\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>https:\/\/www.fortiguard.com\/psirt\/FG-IR-24-015<\/strong><\/a>&nbsp;<\/li><li><a href=\"https:\/\/www.fortiguard.com\/psirt\/FG-IR-24-029\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>https:\/\/www.fortiguard.com\/psirt\/FG-IR-24-029<\/strong><\/a>&nbsp;<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Ranjivi sustavi:<\/strong>&nbsp;<strong><\/strong>&nbsp;<\/td><td><strong>Preporuka:<\/strong>&nbsp;<\/td><\/tr><tr><td>\u2022 FortiOS ina\u010dice 7.4.0 do 7.4.2&nbsp;<\/td><td>Nadograditi na FortiOS ina\u010dicu 7.4.3 ili noviju&nbsp;<\/td><\/tr><tr><td>\u2022 FortiOS ina\u010dice 7.2.0 do 7.2.6&nbsp;<\/td><td>Nadograditi na FortiOS ina\u010dicu 7.2.7 ili noviju&nbsp;<\/td><\/tr><tr><td>\u2022 FortiOS ina\u010dice 7.0.0 do 7.0.13&nbsp;<\/td><td>Nadograditi na FortiOS ina\u010dicu 7.0.14 ili noviju&nbsp;<\/td><\/tr><tr><td>\u2022 FortiOS ina\u010dice 6.4.0 do 6.4.14&nbsp;<\/td><td>Nadograditi na FortiOS ina\u010dicu 6.4.15 ili noviju&nbsp;<\/td><\/tr><tr><td>\u2022 FortiOS ina\u010dice 6.2.0 do 6.2.15&nbsp;<\/td><td>Nadograditi na FortiOS ina\u010dicu 6.2.16 ili noviju&nbsp;<\/td><\/tr><tr><td>\u2022 Sve 6.0 FortiOS ina\u010dice&nbsp;<\/td><td>migracija na stabilne ina\u010dice sustava&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Savjetujemo da provjerite mre\u017ene zapise kako biste se uvjerili da nije ostvaren neovla\u0161teni pristup sustavu te implementirajte uvjetovana pravila pristupa (npr. GeoIP blokiranje) kako biste umanjili izlo\u017eenost napadu.&nbsp;<\/p>","protected":false},"excerpt":{"rendered":"<p>Otkrivene su kriti\u010dne ranjivosti u Fortinet FortiOS SSL VPN-u:&nbsp; CVE-2024-21762 (CVSS 9.8) \u2013 omogu\u0107uje udaljenom, neautentificiranom napada\u010du izvr\u0161avanje proizvoljnog programskog k\u00f4da ili naredbi putem posebno oblikovanih HTTP zahtjeva.\u00a0 CVE-2024-23113 (CVSS 9.8) \u2013 ranjivost u FortiOS fgfmd servisu koja omogu\u0107ava udaljenom, neautentificiranom napada\u010du izvr\u0161avanje proizvoljnog programskog k\u00f4da ili naredbi putem slanja posebno oblikovanih zahtjeva.\u00a0 Fortinet je [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1272,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-895","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=895"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/895\/revisions"}],"predecessor-version":[{"id":1279,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/895\/revisions\/1279"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1272"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=895"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=895"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}