This vulnerability affects multiple versions of Fortinet FortiOS, from 6.2.9 up to 7.6.3. It arises from missing authentication on critical functions, enabling remote attackers to execute unauthorized code or commands by sending specially crafted packets. The vulnerability does not require privileges or user interaction, increasing its risk. The CVSS 3.1 vector indicates the attack vector is adjacent network, with low attack complexity, no privileges required, and no user interaction needed. The impact is high on integrity but does not affect confidentiality or availability. Fortinet has released an official fix for this vulnerability.

An attacker can execute unauthorized code or commands on affected FortiOS devices, potentially compromising the integrity of the system. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits are reported in the wild at this time.

An official patch is available from Fortinet to remediate this vulnerability. Users should apply the provided updates to affected FortiOS versions promptly. Since this is not a cloud service, remediation depends on user action to update their devices. No additional mitigation steps are indicated by the vendor advisory.