Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.
Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.
Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.
Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.
High
CVE-2022-42476 CVSS:8.2
Fortinet FortiOS and Fortinet FortiProxy could allow a local authenticated attacker to gain elevated privileges on the system, caused by a relative path traversal vulnerability. By using specially crafted CLI requests, an attacker could exploit this vulnerability to gain Super Admin privileges of the box.
CVE-2023-25610 CVSS:9.8
Fortinet FortiOS and FortiProxy could allow a remote attacker to execute arbitrary code on the system, caused by a heap buffer underflow in administrative interface. By sending specially-crafted requests, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the GUI.
Fortinet
Refer to FortiGuard Advisory for patch, upgrade or suggested workaround information.