FortiManager Vulnerability CVE-2024-47575 Under Active Exploitation by UNC5820 Threat Group

FortiManager Vulnerability CVE-2024-47575 Under Active Exploitation by UNC5820 Threat Group

Posted: October 25, 2024
Categories: Security, vulnerability
Tags: fortinet security, critical vulnerability
Author: Npav Lab
Views: 35
Fortinet has disclosed an actively exploited critical vulnerability, CVE-2024-47575, impacting FortiManager and FortiAnalyzer devices, which has been attributed to threat cluster UNC5820. This flaw, labeled FortiJump, enables remote unauthenticated attackers to execute arbitrary code on compromised systems, allowing for data exfiltration and potential lateral movement across enterprise networks. The U.S. CISA has flagged this vulnerability for immediate federal agency action, urging rapid patching to prevent unauthorized access and data theft.
Read more