
What is the nature of the threat?įBI, CISA and NCSC have published alerts warning about massive scanning for Fortinet SSL VPN appliances vulnerable to CVE-2018-13379 exploits: In some cases Incident Response may be necessary. Administrators of Fortinet VPNs should take steps to evaluate their versions in use and take appropriate actions. A lingering, unpatched vulnerability in Fortinet SSL VPN appliances has become a target for a new human-operated ransomware attack.
