Vulnerabilitiate de tip MitM pentru device-urile FORTI. Exploit VPN.

[ROMAN91]

O noua vulnerabilitate de tip man in the middle a fost descoperita in ehipamentele/NGFW Forinet.
 

"We quickly found that under default configuration the SSL VPN is not as protected as it should be, and is vulnerable to MITM attacks quite easily," SAM IoT Security Lab's Niv Hertz and Lior Tashimov said.

"The Fortigate SSL-VPN client only verifies that the CA was issued by Fortigate (or another trusted CA), therefore an attacker can easily present a certificate issued to a different Fortigate router without raising any flags, and implement a man-in-the-middle attack."

https://thehackernews.com/2020/09/fortigate-vpn-security.html