FortiGate Config Leak Checker

On January 14 2025, a hacker group leaked Fortinet FortiGate firewall configurations, including plaintext credentials, for over 15,000 devices from an authentication bypass zero-day vulnerability disclosed in October 2022 (CVE-2022-40684).

You can check here whether your IPs or CIDRs are affected by the data leak (source).

If certain addresses are affected, we recommend that you update admin VPN credentials and monitor for unauthorized access.

In addition, it's strongly recommended to patch FortiOS/FortiProxy against the recent zero day CVE-2024-55591:

• FortiOS 7.0.0 to 7.0.16 vulnerable, patched from 7.0.17
• FortiProxy 7.0.0 to 7.0.19 vulnerable, patched from 7.0.20
• FortiProxy 7.2.0 to 7.2.12 vulnerable, patched from 7.2.13