FG-IR-23-407: IPsec dynamic assignation IP spoofing
Published Jan 14, 2025
·Updated
An origin validation error [CWE-346] vulnerability in FortiOS IPSec VPN may allow an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the IP of another user via crafted network packets.
Affected Software
5 affected componentsFixes available
Fortinet FortiOS>=7.4.0<=7.4.1
Fortinet FortiOS>=7.2
Fortinet FortiOS>=7.0
Fortinet FortiOS>=6.4
Fortinet FortiOS>=6.2
Event History
Jan 14, 2025
Advisory Published
via FortiGuard·12:00 AM
Frequently Asked Questions
1
What is the severity of FG-IR-23-407?
FG-IR-23-407 is classified as a moderate severity vulnerability.
2
How do I fix FG-IR-23-407?
To fix FG-IR-23-407, upgrade FortiOS to version 7.4.2 or later.
3
Which versions of FortiOS are affected by FG-IR-23-407?
FG-IR-23-407 affects FortiOS versions 7.4.0 to 7.4.1, as well as versions 7.0, 6.4, 6.2, and 7.2.
4
What type of vulnerability is FG-IR-23-407?
FG-IR-23-407 is an origin validation error categorized under CWE-346.
5
Who is the vendor for FG-IR-23-407?
The vendor for FG-IR-23-407 is Fortinet.