This vulnerability (CVE-2024-55599) involves an improperly implemented security check (CWE-358) in Fortinet FortiOS and FortiProxy products. It allows a remote unauthenticated attacker to bypass DNS filtering controls when accessing the network through Apple devices. The affected versions include FortiOS 7.6.0, 7.4.7 and earlier, 7.0 all versions, and 6.4 all versions, as well as FortiProxy 7.6.1 and earlier, 7.4.8 and earlier, 7.2 all versions, and 7.0 all versions. The vulnerability does not impact confidentiality or availability but can lead to integrity issues by bypassing DNS filtering. The CVSS vector indicates no privileges required, no user interaction needed, and low attack complexity. There is no known exploit in the wild and no vendor advisory or patch currently available.

The vulnerability allows bypassing DNS filtering controls, potentially enabling users or attackers to access domains that should be blocked or filtered. This could undermine network security policies and content filtering mechanisms. There is no impact on confidentiality or availability reported. The integrity impact is low, as the bypass affects filtering controls but does not directly compromise data or system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, organizations should monitor Fortinet advisories for updates. In the meantime, consider applying compensating controls specific to DNS filtering and Apple device traffic if feasible.