FORTINET Security Advisory
Published Date: Not specified
Advisory Summary
🛑 🚨 High-Critical Alert: Path Traversal + NULL Byte Write (CVSS 9.8)
Fortinet reports an Improper Limitation of a Pathname to a Restricted Directory (CWE-22) combined with NULL Byte/NULL Character Neutralization failure (CWE-158) that could allow an unauthenticated attacker to write arbitrary files to the underlying system via crafted HTTP/HTTPS requests.
- Critical severity (9.8) indicates a likely high likelihood of compromise and serious impact.
- Reported exploitation in the wild elevates this from theoretical risk to active threat exposure.
- Arbitrary file write can enable webshells, persistence, credential theft, and full device takeover, depending on affected components and privileges.
- Apply Fortinet’s workaround as urged in the PSIRT advisory.
- Treat as urgent incident-response-level work: validate exposure, review recent access/log anomalies around HTTP/HTTPS request patterns, and prepare for the permanent remediation path Fortinet recommends.
🔍 Recommended verification steps (practical)
1. Identify affected products/versions referenced in the advisory.
2. Hunt for suspicious path traversal strings and encoded NULL byte patterns in web/proxy/WAF logs.
3. Check for unexpected files created/modified via web-access paths (timestamps, names, locations).
4. Ensure edge access controls (ACLs, admin interface exposure) are tight while remediation is in progress.
📎
🔗
-22 -158
Reference: Vendor Advisory