CVE-2023-37936

Summary

CVE-2023-37936 is a vulnerability affecting Fortinet FortiSwitch versions 7.4.0, 7.2.0 through 7.2.5, 7.0.0 through 7.0.7, 6.4.0 through 6.4.13, and 6.2.0 through 6.2.7, as well as 6.0.0 through 6.0.7. The flaw stems from the use of a hard-coded cryptographic key. An attacker can exploit this vulnerability by crafting malicious requests and gain unauthorized access to execute code or issue commands on the FortiSwitch system. This issue poses a significant risk, as it allows attackers to bypass authentication and potentially take control of the affected network devices. Organizations using the impacted FortiSwitch versions are urged to apply the available patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.