CISA orders urgent patching of vulnerabilities in Fortinet FortiSandbox

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday directed federal agencies to prioritize patching two vulnerabilities in Fortinet's FortiSandbox threat detection platform.

According to CISA, both vulnerabilities are already being actively exploited by threat actors. The agency added them to its Known Exploited Vulnerabilities catalog, which obligates federal bodies to remediate them by a set deadline.

What we know

FortiSandbox is a Fortinet platform designed to analyze suspicious files and detect malicious activity within corporate networks. Vulnerabilities in solutions of this kind pose a heightened risk, since the system itself is involved in protecting the infrastructure and can become an entry point for attackers.

CISA has not disclosed any details about the nature of the vulnerabilities, the exploitation techniques, or the scale of the attacks, limiting itself to the demand for urgent patching.

Response and requirements

Adding vulnerabilities to the CISA catalog is mandatory for U.S. federal agencies, which must apply the fixes within a tight timeframe. For other organizations using FortiSandbox, such directives serve as a signal to immediately review their systems and install the latest updates.

Fortinet has repeatedly drawn CISA's attention in the past over vulnerabilities in its products that attackers exploited before patches were released or right after the information about them was disclosed.

Administrators using FortiSandbox are advised to consult Fortinet's official advisories and promptly install the necessary security updates.

Source: Bleeping Computer