This critical FortiSwitch flaw allows hackers to change admins passwords, and they can even do it remotely

• Fortinet found an escalation of privilege flaw in multiple versions of FortiSwitch
• The flaw was given a critical severity score
• A patch and a mitigation measure are both available

Fortinet has patched a critical severity vulnerability in FortiSwitch which allowed malicious actors to change users’ login credentials.

In a short security advisory published earlier this week, the company detailed the escalation of privilege flaw, the versions of FortiSwitch which were affected, and suggested a workaround for those unable to patch things up immediately.