H-ISAC TLP White Fortinet Patches Critical FortiWLM Vulnerability CVE-2023-34990 – December 27, 2024

On December 18, 2024, FortiGuard Labs published a disclosing a vulnerability in FortiWLM, a wireless device management application by Fortinet. The flaw, tracked as CVE-2023-34990, has a CVSS score of 9.6, indicating its critical nature.

This vulnerability is a relative path traversal issue, which could allow remote, unauthenticated threat actors to access sensitive files. According to the, the flaw also enables attackers to execute unauthorized code through specially crafted web requests. The NVD assigned a CVSS score of 9.8 to this vulnerability, which is higher than the score given by Fortinet.

View the detailed report below.

For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:

John Riggi

National Advisor for Cybersecurity and Risk, AHA

jriggi@aha.org

(O) +1 202 626 2272

More on John Riggi
Learn more about AHA's Cybersecurity and Risk Advisory Services

Key Resources

Related Resources

Special Bulletin
UPDATE: AHA and Health-ISAC Threat Advisory: FBI Advises No Specific Credible Threat Targeting Hospitals
Public
Special Bulletin
AHA and Health-ISAC Bulletin on Threat to Hospitals
Member
AHA Center for Health Innovation Market Scan
Rural Hospitals Move to Enhance Cybersecurity
Advancing Health Podcast
Critical Condition: Cybersecurity in Rural Hospitals with Microsoft Part 2
Advancing Health Podcast
Critical Condition: Cybersecurity in Rural Hospitals with Microsoft Part 1
Public
Guides/Reports
Change Healthcare Cyberattack Underscores Urgent Need to Strengthen Cyber Preparedness for Individual Health Care Organizations and as a Field
Public