CVE-2024-21762 - Defense.One

CVE-2024-21762

sy64

FortiOS 7.4 7.4.0 through 7.4.2 Upgrade to 7.4.3 or above
FortiOS 7.2 7.2.0 through 7.2.6 Upgrade to 7.2.7 or above
FortiOS 7.0 7.0.0 through 7.0.13 Upgrade to 7.0.14 or above
FortiOS 6.4 6.4.0 through 6.4.14 Upgrade to 6.4.15 or above
FortiOS 6.2 6.2.0 through 6.2.15 Upgrade to 6.2.16 or above
FortiOS 6.0 6.0.0 through 6.0.17 Upgrade to 6.0.18 or above

sy64

https://github.com/BishopFox/cve-2024-21762-check

sy64

https://www.optistream.io/blogs/tech/fortigate-firmware-analysis

https://github.com/optistream/fortigate-crypto/tree/main

sy64

https://bishopfox.com/blog/further-adventures-in-fortinet-decryption

sy64

https://github.com/fox-it/dissect.target/pull/510

sy64

https://tiangonglab.github.io/blog/tiangongarticle021/

sy64

https://www.assetnote.io/resources/research/two-bytes-is-plenty-fortigate-rce-with-cve-2024-21762