This vulnerability involves an improperly implemented security check in Fortinet FortiOS and FortiProxy products that could allow remote unauthenticated attackers to bypass DNS filtering controls specifically when Apple devices are involved. The issue affects multiple major versions of FortiOS and FortiProxy, potentially allowing DNS filter bypass without authentication. The CVSS score of 4.9 indicates a medium severity impact primarily on integrity, with no confidentiality or availability impact. There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.

The vulnerability allows remote unauthenticated users to bypass DNS filtering protections on affected FortiOS and FortiProxy versions when Apple devices are used. This could lead to users circumventing DNS-based security controls, potentially enabling access to restricted or malicious domains. The impact is limited to integrity as per the CVSS vector, with no direct confidentiality or availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor Fortinet advisories for updates. In the meantime, consider additional DNS filtering controls or network monitoring to detect potential bypass attempts involving Apple devices.