# MA-1045.032024: MyCERT Advisory - Fortinet Releases Security Updates for Multiple Products

**Date:** 14 Mar 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1045.032024  
**Advisory ID:** MA-1045.032024

---

**1.0 Introduction**
Recently, Fortinet has released a security update to address a vulnerability in multiple Fortinet products.
**2.0 Impact**
A cyber threat actor could exploit this vulnerability to take control of an affected system.
**3.0 Affected Products**
Multiple Fortinet products. 
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review the [Fortinet Security Updates for Multiple Products](https://www.cisa.gov/news-events/alerts/2024/03/12/fortinet-releases-security-updates-multiple-products) and apply necessary updates. Kindly refer to the following URL: 
- FR-IR-23-390: FortiClientEMS – CVS injection in log download feature: <https://www.fortiguard.com/psirt/FG-IR-23-390>
- FR-IR-23-328: FortiOS, FortiProxy – Out-of-bounds Write in captive portal: <https://www.fortiguard.com/psirt/FG-IR-23-328>
- FR-IR-24-013: FortiOS, FortiProxy – Authorization bypass in SSLVPN bookmarks: <https://www.fortiguard.com/psirt/FG-IR-24-013>
- FR-IR-23-103: FortiWLM MEA for FortiManager – Improper access control in backup and restore features: <https://www.fortiguard.com/psirt/FG-IR-23-103>
- FR-IR-24-007: Pervasive SQL injection in DAS component: <https://www.fortiguard.com/psirt/FG-IR-24-007>
Generally, we advise the users of the devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact us through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/) 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://www.cisa.gov/news-events/alerts/2024/03/12/fortinet-releases-security-updates-multiple-products>
- <https://www.fortiguard.com/psirt/FG-IR-24-007>
- <https://www.fortiguard.com/psirt/FG-IR-23-103>
- <https://www.fortiguard.com/psirt/FG-IR-24-013>
- <https://www.fortiguard.com/psirt/FG-IR-23-328>
- [https://www.fortiguard.com/psirt/FG-IR-23-390](•	https://www.fortiguard.com/psirt/FG-IR-23-390)