Fortigate SSL-VPN Remote Code Execution vulnerability

Daniel Goymer • June 12, 2023

Fortinet has published a new advisory relating to a security vulnerability affecting their firewalls, Fortigate SSL-VPN Remote Code Execution vulnerability | CERT NZ. A number of these types vulnerabilities have been discovered in the past couple of years and they can be frustrating.


The nature of security means, these issues are going to occur with all vendors and it’s important you have a process to mitigate the issues when these are discovered.


In the past 24 hours Yorb has patched all clients with our SecureNET contract, these contracts allow us to proactively monitor firewalls and take automated steps to mitigate threats as they are notified. It reduces everyone’s stress levels (and risk) when the tools, systems and processes are in place to manage and resolve these risks efficiently.


Security and the management of your systems is not an IT issue, it’s a business issue. Ensure as a business you are asking the right questions, do you have the appropriate systems in place to protect all your critical infrastructure?

Recent Posts

Why you should think of your technology partner as an iceberg.

February 21, 2025
And no, it’s not because it has the potential to turn you into a Titanic. Rather, it’s because what you see and interact with most days is just the tip of what we do. Below the waterline of everyday interaction is a significant mass of knowledge, expertise, and strategic value – all aimed at helping to secure and enable the growth of your business.

NZ Privacy Act – what you really, really need to know - (Data Privacy Day Part 2)

By Yorb • January 30, 2025
In part 1 of our Data Privacy Day blog, we discussed the state of cybersecurity in New Zealand (as you do) and the critical importance of data governance. You can catch up on the whys and wherefores of data governance as it applies to you here . Moving on, this time, we’re focusing on the 13 Information Privacy Principles in our Privacy Act (2020) and what you need to do to stay on the good side of our legislation – and your customers. But first, this is why you should care.

Data Privacy Day, and why you should mind your own business - (Data Privacy Day Part 1)

By Yorb • January 23, 2025
Data Privacy Day has been internationally observed on 28 January since 2007. Its purpose is to raise awareness and promote best privacy and data protection practices. It serves as an excellent reminder of exactly how precious our data is, as well as our ethical and legal obligations as businesses to securely manage and protect it. So, in terms of data privacy, how have we fared here in New Zealand? Why is data governance so important - what is it, and why exactly do you need it? Warning – triggering content: It may not be your job to manage data – and you may not think you even need to care about it. But if you are a stakeholder, it’s your responsibility to make sure that your business complies with New Zealand’s privacy and data protection best practices.  This is a big topic (sorry!), so it’s in two parts.
Share by: