Multiple vulnerabilities have been discovered in Fortinet products, the most severe of which could allow for remote code execution.

• FortiSIEM is a Security Information and Event Management (SIEM) solution from Fortinet that provides real-time infrastructure and user awareness for accurate threat detection, analysis, and reporting.
• FortiManager is a network and security management tool that provides centralized management of Fortinet devices from a single console.
• FortiManager Cloud is a cloud-based service for centralized management, monitoring, and automation of Fortinet devices across multiple sites
• FortiOS is the Fortinet’s proprietary Operation System which is utilized across multiple product lines.
• FortiPAM provides privileged account management, session monitoring and management, and role-based access control to secure access to sensitive assets and mitigate data breaches.
• FortiProxy is a secure web gateway that attempts to protects users against internet-borne attacks and provides protection and visibility to the network against unauthorized access and threats.
• FortiSwitchManager enables network administrators to cut through the complexities of non-FortiGate-managed FortiSwitch deployments.

Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution in the context of the affected service account. Depending on the privileges associated with the service account an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Service accounts that are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

Read more... Cyber Security Advisories - MS-ISAC