CVE-2022-42475

Arctic Wolf warns of an actively exploited FortiOS SSL VPN remote code execution vulnerability (CVE-2022-42475) affecting multiple FortiOS versions, provides tables of impacted and fixed versions (including newly added affected releases), and strongly recommends upgrading to fixed versions after testing; the bulletin notes observed exploitation in the wild and that attackers leveraged the flaw to deploy files, obtain device configurations, create admin accounts, and run scripts, assessing a high likelihood of continued exploitation.