An unauthenticated information exposure vulnerability in Fortinet FortiFone allows attackers to extract sensitive device configuration data.

This is an improper access control vulnerability (CWE-200) that allows an unauthenticated attacker to obtain device configuration files through crafted HTTP/HTTPS requests.

The exposure of device configurations can reveal sensitive information, such as authentication credentials, network topology, or internal settings, which can be leveraged for further attacks or lateral movement. The CVSS score of 9.8 highlights the potential for severe impact on the confidentiality and integrity of the affected devices.

Immediate Action: Upgrade FortiFone firmware to version 7.2.0, 7.0.2, or 3.0.24, depending on the current version installed.

Proactive Monitoring: Monitor HTTP/HTTPS traffic to FortiFone devices for unusual request patterns or attempts to access configuration-related endpoints.

Compensating Controls: Isolate FortiFone devices within a dedicated management VLAN and restrict access to the management interface via firewall rules.

Public Exploit Available: Unknown

Information disclosure vulnerabilities are often precursors to more complex attacks. Organizations using the affected FortiFone models should apply the vendor-provided firmware updates immediately to prevent unauthorized access to sensitive configuration data.