✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Alert –Sodinokibi Ransomware – Active IOCs

August 20, 2021
Rewterz

Rewterz Threat Advisory –CVE-2021-24145 – WordPress Code Execution Vulnerability

August 20, 2021

Rewterz Threat Update –Unpatched Fortinet Vulnerabilities

Severity

High

Analysis Summary

Fortinet’s web application firewall (WAF) platform, known as FortiWeb, has been discovered to have an unpatched OS command-injection security vulnerability. It may allow for privilege escalation and complete device control. FortiWeb is a cybersecurity defense platform designed to protect mission-critical web applications from known and unknown vulnerabilities. According to Fortinet, the firewall has been used to keep up with the deployment of new or updated features, as well as the addition of new online APIs.

CVE-2018-13379, CVE-2019-5591, CVE-2020-12812, CVE-2021-22123, CVE-2020-29015

Fortinet has released critical patches to address vulnerabilities in multiple products. Users and administrators are encouraged to apply the necessary updates.

Impact

  • Privilege Escalation

Affected Vendors

Fortinet

Affected Products

  • version 6.3.11 and prior

Remediation

To upgrade to the latest patches and security updates, visit the vendor website

https://www.fortiguard.com/psirt_policy

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo