FortiOS 7.0 and unfixed CVE's

Forum|Forum|1 year ago
February 12, 2025
3 replies
2640 views

Hi all,

Have a Fortigate 81F running 7.0.17.

I note that some CVE's such as FG-IR-23-293 and FG-IR-24-250 are listed as being vulnerable on all 7.0 versions.

Is it likely that the 7.0 firmware will never get these fixed and we should move to 7.2?

thanks

JC

FortiGate

Best answer by AEK

Hi JC

These are 2025 vulnerabilities and are not critical, while FOS 7.0.x is end of support since 2024.

When it is EoS, Fortinet will not fix vulnerabilities or bugs unless they are critical, while the above mentioned vulnerabilities are not critical.

AEKAnswer

SuperUser

Hi JC

These are 2025 vulnerabilities and are not critical, while FOS 7.0.x is end of support since 2024.

When it is EoS, Fortinet will not fix vulnerabilities or bugs unless they are critical, while the above mentioned vulnerabilities are not critical.

AEK

jcrowerAuthor

Explorer II

Thanks @AEK I missed that 7.0.x is out of support.

Will upgrade to 7.2.

d1rage5

New Member

I know this is a few months old but 7.2 its not fixed and as others have said it may not be corrected as its not critical. I think only 7.6 this currently fixed on.

Sign up

Login with SSO

Login to the community

Login with SSO