Breaking Down the Latest February 2023 Monthly PSIRT Advisory Report From Fortinet

Monthly PSIRT Advisories refers to an Advisories Report that Fortinet’s Product Security Incident Response Team (PSIRT) team rolls out every month. The report provides a list of advisories for vulnerabilities resolved in Fortinet products. Considering its importance, we have decided to publish a monthly breakdown of the Fortinet Monthly PSIRT Advisory Report on thesecmaster.com. We are going to cover the February 2023 Monthly PSIRT Advisory Report this time and going forward. You are going to see the same report for upcoming months on this website.

Summary of February 2023 Monthly PSIRT Advisory Report:

Fortinet released the February 2023 Monthly PSIRT Advisory Report early this week. Let’s see the summary of the report:

Vulnerabilities by Category:

All 40 vulnerabilities are categorized into 16 different vulnerabilities. Command injection is the most frequently identified vulnerability, appearing 7 times in the February 2023 Monthly PSIRT Advisory Report. Command injection is a web security vulnerability that allows an attacker to execute arbitrary operating system (OS) commands on the server that is running an application and typically fully compromises the application and all its data. Buffer overflow and cryptographic vulnerabilities are the next most frequently identified vulnerability types, appearing 6 times each. Path traversal vulnerabilities appear 5 times, and cross-site scripting (XSS) vulnerabilities appear 4 times. Please see this table which provides information on the number of various vulnerability types identified in the February 2023 Monthly PSIRT Advisory Report.

Vulnerabilities by Product:

Please refer to this table if you want to know the list of vulnerabilities by the Fortinet products.

List of Critical Vulnerabilities February 2023 Monthly PSIRT Advisory Report:

The severity of the identified vulnerabilities is measured in the CVSS score. CVSS is a scale measured from 0 to 10 where 0 is the least severe and 10 is the most severe Vulnerability. All the vulnerabilities are assigned a CVSS number between 0.0 to 10.10 depending on several factors, including the attack vector, the attack complexity, and the impact on confidentiality, integrity, and availability. The vulnerabilities assigned the CVSS score between 0 to 4 are labeled ‘Low’ severity. The vulnerabilities assigned the CVSS score between 4 to 7 are labeled ‘Medium’ severity. Similarly, the vulnerabilities assigned a CVSS score between 7 to 8 are labeled ‘High’ severity, and the CVSS score between 9 to 10 is ‘Critical’ in severity.

The below table lists the vulnerabilities considered Critical in severity.

Comprehensive List of Vulnerabilities Patched in February 2023 Monthly PSIRT Advisory Report:

We have segregated the list into multiple lists by the Applications. You can refer to the complete list of the official Fortinet security updates here. 

FortiWeb Vulnerabilities

FortiOS Vulnerabilities

FortiNAC Vulnerabilities

FortiNAC Vulnerabilities

FortiAnalyzer Vulnerabilities

FortiAnalyzer Vulnerabilities

FortiADC Vulnerabilities

Fortisandbox Vulnerabilities

Fortisandbox Vulnerabilities

FortiWAN Vulnerabilities

FortiAuthenticator Vulnerabilities

FortiSwitch Vulnerabilities

FortiSwitchManager Vulnerabilities

We hope this post would help you know about the February 2023 Monthly PSIRT Advisory Report published by fortinet on 16th February 2023. Please share this post and help to secure the digital world. Visit our social media page on Facebook, LinkedIn, Twitter, Telegram, Tumblr, Medium & Instagram, and subscribe to receive updates like this.