Fortinet warns users that FortiClientEMS flaw is actively exploited by hackers
Take action: Now it's urgent to patch your ForticlientEMS. With the PoC available, the attacks will be coming fast.
Learn More
Fortinet has issued a warning to users of its FortiClient Enterprise Management Server (EMS) that the security vulnerability reported 2 weeks ago that is currently being actively exploited.
The exploitation of this SQL Injection vulnerability is particularly alarming due to its simplicity, as demonstrated by a proof-of-concept released by Horizon3.ai, which shows how attackers can easily manipulate the system.
This vulnerability impacts specific versions of the FortiClient EMS, ranging from 7.2.0 to 7.2.2 and from 7.0.1 to 7.0.10. In light of the active exploitation of this vulnerability, Fortinet urges users, especially those utilizing affected SSL VPNs, to promptly install the available updates to safeguard their systems against potential attacks.
