FortiOS 7.0 and unfixed CVE's

[jcrower]

Hi all,

Have a Fortigate 81F running 7.0.17.

I note that some CVE's such as FG-IR-23-293 and FG-IR-24-250 are listed as being vulnerable on all 7.0 versions.

Is it likely that the 7.0 firmware will never get these fixed and we should move to 7.2?

thanks

JC

[AEK · Accepted solution]

Hi JC

These are 2025 vulnerabilities and are not critical, while FOS 7.0.x is end of support since 2024.

When it is EoS, Fortinet will not fix vulnerabilities or bugs unless they are critical, while the above mentioned vulnerabilities are not critical.

[jcrower]

Thanks @AEK I missed that 7.0.x is out of support.

Will upgrade to 7.2.