A high severity privilege escalation vulnerability in Fortinet FortiOS allows local authenticated attackers to achieve system command execution, posing a significant risk to device integrity.

This is an Incorrect Provision of Specified Functionality (CWE-684) vulnerability that facilitates privilege escalation. It requires the attacker to have local authenticated access to the CLI to execute the malicious commands.

Successful exploitation of this vulnerability allows an authenticated attacker to execute system-level commands, effectively bypassing existing security controls. Given the CVSS score of 8.2, this represents a significant risk where an attacker with limited CLI access could escalate privileges to gain full control over the firewall, potentially leading to unauthorized data access, network disruption, or further lateral movement within the environment.

Immediate Action: Upgrade to FortiOS version 7.6.1, 7.4.6, 7.2.11, 7.0.16, or above to resolve the underlying flaw.

Proactive Monitoring: Review administrative CLI logs for suspicious or unauthorized command patterns and monitor for unexpected changes to system configuration files.

Compensating Controls: Restrict administrative CLI access to trusted personnel only and enforce the principle of least privilege for all administrative accounts to limit the potential impact of an account compromise.

Public Exploit Available: Unknown

Organizations should prioritize patching affected FortiOS devices as part of their standard update cycle. Given the potential for full system compromise, verifying the integrity of administrative accounts and restricting CLI access is essential to prevent exploitation by malicious insiders or compromised accounts.