FortiOS 7.0 and unfixed CVE's

[jcrower]

Hi all,

Have a Fortigate 81F running 7.0.17.

I note that some CVE's such as FG-IR-23-293 and FG-IR-24-250 are listed as being vulnerable on all 7.0 versions.

Is it likely that the 7.0 firmware will never get these fixed and we should move to 7.2?

thanks

JC

[AEK · Accepted solution]

Hi JC

These are 2025 vulnerabilities and are not critical, while FOS 7.0.x is end of support since 2024.

When it is EoS, Fortinet will not fix vulnerabilities or bugs unless they are critical, while the above mentioned vulnerabilities are not critical.

[jcrower]

Thanks @AEK I missed that 7.0.x is out of support.

Will upgrade to 7.2.

[d1rage5]

I know this is a few months old but 7.2 its not fixed and as others have said it may not be corrected as its not critical. I think only 7.6 this currently fixed on.