![[H]ard|Forum](/styles/hardforum/xenforo/logo_dark.png){kind=logo}
- Joined
- Dec 19, 2005
- Messages
- 18,921
Contacted by ZDNet, a Fortinet spokesperson explained why the company took so much time with fixing the reported issues:
"The security of our customers is top priority at Fortinet. Once the issue was disclosed to Fortinet, we immediately began working with our internal research team to develop software updates for the affected products. As part of that process, the team took time to architect a solution while protecting the connection to FortiGuard Services for our customers. Keeping with our responsible disclosure policies to protect customers, Fortinet does not distribute an advisory until all solutions are in place, tested, and in place for the affected products."
Viehböc's write-up and demo code is available on the SEC Consult website. Fortinet's security advisory is available here.
https://www.zdnet.com/article/some-fortinet-products-shipped-with-hardcoded-encryption-keys/
"The security of our customers is top priority at Fortinet. Once the issue was disclosed to Fortinet, we immediately began working with our internal research team to develop software updates for the affected products. As part of that process, the team took time to architect a solution while protecting the connection to FortiGuard Services for our customers. Keeping with our responsible disclosure policies to protect customers, Fortinet does not distribute an advisory until all solutions are in place, tested, and in place for the affected products."
Viehböc's write-up and demo code is available on the SEC Consult website. Fortinet's security advisory is available here.
https://www.zdnet.com/article/some-fortinet-products-shipped-with-hardcoded-encryption-keys/
