This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.
Hi,
As the CVE states, the attacker doesn't need to be authenticated, so to your question to the answer will be yes, it can still be exploited even though you have any kind of 2FA configured.
Thanks for the response, but I'm wondering if it is certain
It would be great if Fortinet information security could answer our question ?
Hello. You should upgrade your firewalls if you are running vulnerable versions and have SSLVPN enabled. It doesn't matter if you are using MFA/2FA or not.
Can this vulnerability CVE-2022-42475 be exploited in conjunction with limit access to specific hosts(SSL-VPN Settings>Restrict Access>Limit access to specific hosts)?
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.