CVE-2023-27997

[EHoegee]

Is there any official report on this that comes from Fortinet?

I see a lot of people patching but so far no report from Fortinet.

Thank you in advance,

Evert

[freddelm]

Also Does the Vulnerability apply if SSL-VPN is not enabled on the Fortigate?

My config is 

config vpn ssl settings

set status disable

[JS_DC]

Also curious about this.  We disabled SSL-VPN after the last public vulnerability as a mitigation and left it disabled. 

[Toshi_Esumi]

It seems to come out tomorrow in I guess US time.
https://www.helpnetsecurity.com/2023/06/11/cve-2023-27997/

Toshi

[EHoegee]

Yes, that is indeed also what I got back from Support!

[Late2IT · Accepted solution]

Analysis of CVE-2023-27997 and Clarifications on Volt Typhoon Campaign | Fortinet Blog

Just subscribed to the RSS feed

[EHoegee]

You saved my day!

[EHoegee]

One more thing to note:

https://www.fortiguard.com/psirt/FG-IR-23-097

[Toshi_Esumi]

Can someone from FTNT tell us when those release notes would be updated to include "no longer vulnerable" statement in? Don't seem to be updated yet.

Toshi

[Toshi_Esumi]

I now see the release notes are updated to include the fixes.

Thanks,

Toshi