March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2024-22349 – SonicWall SonicOS Vulnerability
February 9, 2024
Rewterz Threat Alert – Remcos RAT – Active IOCs
February 9, 2024
Rewterz Threat Advisory – CVE-2024-22349 – SonicWall SonicOS Vulnerability
February 9, 2024
Rewterz Threat Alert – Remcos RAT – Active IOCs
February 9, 2024
Severity
High
Analysis Summary
CVE-2024-23108, CVE-2024-23109
Fortinet FortiSIEM could allow a remote attacker to execute arbitrary commands on the system, caused by OS command injection. By sending specially crafted API requests, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2024-23108
- CVE-2024-23109
Affected Vendors
Fortinet
Affected Products
- Fortinet FortiSIEM 6.4
- Fortinet FortiSIEM 6.5
- Fortinet FortiSIEM 6.6
- Fortinet FortiSIEM 6.7.0
- Fortinet FortiSIEM 7.0.0
Remediation
Refer to FortiGuard Advisory for patch, upgrade or suggested workaround information.