SSL-VPN Default Setting(CVE-2022-42475)

[squid-c]

Hello everyone.

I have a question about this vulnerability.

SSL-VPN related settings are default.
At this time, I thought that I was not using SSL-VPN.
Of course, all communication from WAN to LAN is denied.

But SSL-VPN is enabled by default.
If I don't enter the following settings, will I be vulnerable?

# config vpn ssl settings
#set status disable
#end

BR

[pgautam · Accepted solution]

Dear Customer,

The default setting on fortigate is 

lab_FGT # config vpn ssl settings

lab_FGT(settings) #show full-configuration
config vpn ssl settings
set status enable

This means the default set status is enabled.

This explains that SSL VPN functionality is enabled on the FGT.

As per the advisory, it is recommended to disable SSL VPN functionality or upgrade the fortigate.

https://www.fortiguard.com/psirt/FG-IR-22-398

# config vpn ssl settings
#set status disable
#end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-nbsp-How-to-disable-SSL-VPN-functionality-...

Regards

Priyanka