FBI & CISA Issue Joint Advisory to Warn of Active Exploits on Fortinet FortiOS

Fortinet FortiOS

The Federal Bureau of Investigation (FBI) and Cyber & Infrastructure Security Agency (CISA) have released a joint advisory to warn Fortinet FortiOS administrators on Advanced Persistent Threats (APT) actively scanning devices on ports 4443, 8443, and 10443 for CVE-2018-13379, as well as device enumerations for CVE-2020-12813 and CVE-2019-5591 to gain access.

Administrators are urged to patch the said vulnerabilities if they have not been patched yet.

https://us-cert.cisa.gov/ncas/current-activity/2021/04/02/fbi-cisa-joint-advisory-exploitation-fortinet-fortios

https://threatpost.com/fbi-apts-actively-exploiting-fortinet-vpn-security-holes/165213/