Problem with Fortinet 100E

[pquiroz]

Hello everyone, I'm from Mexico.

I have a big problem, recently I have problems accessing my fortinet because it sends an error that says "Authentication failure" and does not let me access.

I have tried to access via forticloud, console cable and locally and I get the same problem.

What I found is that we have suffered from a vulnerability called "FG-IR-23-475": FortiOS - SSLVPN session hijacking using SAML authentication
A session fixation vulnerability [CWE-384] in FortiOS may allow an unauthenticated attacker to hijack user session via a phishing SAML authentication link.

So I don't have access in any way. Is there any way to access it?

To update the firmware can I do it through the forticloud Premium subscription since I currently do not have it.

Note: I currently have the OS version: 7.2.6

[dingjerry_FTNT]

Hi @pquiroz ,

I assume you have local access to the FGT device.

What is the type of your account?  Local or remote?

Please check this KB article since your FortiOS is 7.2.6 and the maintainer is not feasible for you to reset the admin password:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Removal-of-maintainer-account-feature/ta-p...

[pquiroz]

I don't have local access, it keeps giving the same error.

I think that if I downgrade it I could use the maintainer user, but is this possible?

[Toshi_Esumi]

If you go back to previous version with the config at that time by following below, you maybe able to get in again because that config wouldn't have been tampered.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Boot-the-backup-firmware-and-config-via-co...

If even that option doesn't work, your only option might be getting into the boot menu again and loading up the image of the current version (the config is the factory default), then load up a backup config.

Toshi

[pavankr5]

Hello @pquiroz 

To troubleshoot an 'Authentication failure' error with FortiToken Cloud. 

Connect to the FortiGate via Console Cable: Refer to this guide for detailed instructions on connecting to the FortiGate console port:

Technical Tip: How to connect to the FortiGate console port

Thanks,

Pavan

[kaman]

Hello @pquiroz,

You have to Format and load the FortiGate firmware image using TFTP 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Formatting-and-loading-FortiGate-firmware-...

Regards,
Aman

[Renante_Era]

If you're unable to access the FortiGate, then your next step is to factory reset the device which means you're going to lose the config. If you have a backup config, then you can restore the backup config on the same firmware version. If you don't have a backup config then you'll need to configure the FortiGate from scratch.
How To Reset To Factory Default Configura... - Fortinet Community

Resetting a lost admin password - Fortinet Community

[DianaButler]

I had the same problem, And after a reset, it solved the problem.