Critical SQL Injection Vulnerability in Fortinet FortiClient EMS

What changed

Fortinet has identified a serious SQL injection vulnerability in its FortiClient Enterprise Management Server (EMS). This flaw, present in versions 7.2.0 through 7.2.2 and 7.0.1 through 7.0.10, allows attackers to execute unauthorized commands by sending specially crafted packets.

This vulnerability underscores the importance of robust input validation and the need for organizations to stay updated with their software versions to mitigate potential risks.

Who is affected

Organizations utilizing Fortinet FortiClient EMS are at risk due to this vulnerability. The following groups should take immediate note:

Companies relying on FortiClient EMS for endpoint management, particularly those using versions 7.2.0 through 7.2.2 and 7.0.1 through 7.0.10, are directly affected.

• Fortinet FortiClient EMS version 7.2.0 to 7.2.2
• Fortinet FortiClient EMS version 7.0.1 to 7.0.10
• Organizations managing endpoints with Fortinet products

What to do

To protect against this vulnerability, it is crucial for affected organizations to take immediate action. Updating to the latest version of FortiClient EMS is highly recommended.

Additionally, organizations should review their security policies and practices to ensure they are equipped to handle such vulnerabilities in the future.

• Upgrade to the latest FortiClient EMS version immediately.
• Implement strict input validation measures.
• Regularly audit and monitor systems for vulnerabilities.