Dangerous New Cyber Threat Targets Small Aussie Businesses: Are You at Risk?

Common Critical Vulnerability

Learn how cybercriminals are exploiting vulnerabilities in small business IT networks, endangering critical data. Don’t wait until it’s too late – find out what you need to do to be protected!

A critical new cyber threat has emerged, identified by the Australian Government’s Australian Signals Directorate (ASD). This vulnerability, affecting Fortinet Fortigate devices, is catching Aussie small businesses off guard and putting them at severe risk of costly and debilitating cyberattacks. If your business relies on Fortigate’s SSL-VPN, you need to act fast to secure your systems and protect your valuable data.

What’s Happening?

A serious Remote Code Execution (RCE) vulnerability, identified as CVE-2023-27997, has been found in multiple versions of Fortinet Fortigate devices. This vulnerability can be exploited through a URL parameter in the FortiOS SSL-VPN, leading to a heap-based buffer overflow. In simple terms, it allows hackers to execute arbitrary code on your systems before authentication even occurs. This could mean severe data breaches, system hijacking, and substantial financial losses for your business.

Why Should You Care?

1. High Risk of Attack: With the critical nature of this vulnerability, your business is at a high risk of being targeted by cybercriminals looking to exploit this weakness.
2. Potential Consequences: If exploited, this vulnerability could allow attackers to take complete control of your systems, leading to data theft, operational disruptions, and significant financial damages.
3. Wide Impact: Fortigate devices are widely used in small businesses, making this vulnerability a widespread issue that needs immediate attention.

Immediate Actions Required

To protect your business from this critical vulnerability, immediate action is essential. The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has detected this as a critical issue and recommends the following:

1. Update Your Systems: Ensure your Fortigate devices are updated to the latest FortiOS versions that have patched this vulnerability:
   
   • Upgrade to FortiOS version 7.4.0 or above
   • Upgrade to FortiOS version 7.2.5 or above
   • Upgrade to FortiOS version 7.0.12 or above
   • Upgrade to FortiOS version 6.4.13 or above
   • Upgrade to FortiOS version 6.2.14 or above
   • Upgrade to FortiOS version 6.0.17 or above
     
2. Disable SSL-VPN Temporarily: If you cannot immediately apply the patches, disable the SSL-VPN feature on affected devices to prevent potential exploitation.

Take Action Now: Protect Your Business with xSpectre

At xSpectre, we understand the unique cybersecurity challenges faced by small businesses. Our team of experts is ready to help you secure your Fortigate devices and safeguard your business against this critical vulnerability. Don’t wait until it’s too late—take proactive steps to protect your business now.

Contact xSpectreE today to schedule a comprehensive security assessment and ensure your systems are fully protected. Our experts will guide you through the necessary updates and provide ongoing support to keep your business safe from cyber threats.

Contact Us

For detailed information, refer to the Australian Government ASD’s advisory.