CVE-2024-55599 describes an improper implementation of a security check (CWE-358) in Fortinet FortiOS and FortiProxy products. This flaw allows remote unauthenticated attackers to bypass the DNS filtering mechanism when connecting via Apple devices. The affected versions include FortiOS 7.6.0, 7.4.7 and earlier, 7.0 all versions, and 6.4 all versions, as well as FortiProxy 7.6.1 and earlier, 7.4.8 and earlier, 7.2 all versions, and 7.0 all versions. The vulnerability does not impact confidentiality or availability but allows integrity impact by bypassing DNS filtering controls. The CVSS vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and an impact limited to integrity. No vendor advisory or patch information is currently available.

The vulnerability allows a remote unauthenticated attacker to bypass DNS filtering controls on affected FortiOS and FortiProxy versions when accessed via Apple devices. This could lead to unauthorized access to DNS queries that should be filtered, potentially allowing access to restricted or malicious domains. There is no direct impact on confidentiality or availability reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation or patch information is provided, users should monitor Fortinet advisories closely for updates. In the meantime, consider applying network-level DNS filtering or other compensating controls to mitigate risk from DNS filter bypass.