This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.
As the CVE states, the attacker doesn't need to be authenticated, so to your question to the answer will be yes, it can still be exploited even though you have any kind of 2FA configured.
Hello. You should upgrade your firewalls if you are running vulnerable versions and have SSLVPN enabled. It doesn't matter if you are using MFA/2FA or not.
Can this vulnerability CVE-2022-42475 be exploited in conjunction with limit access to specific hosts(SSL-VPN Settings>Restrict Access>Limit access to specific hosts)?
