New Zealand: National Cyber Security Centre cyber security alert regarding exploitation of vulnerabilities in Fortinet FortiOS products

Progress

Current status
adopted
11 Apr 2025 adopted

Scope

Implementers
New Zealand
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
software provider: app stores
software provider: other software
Government Branch
executive
Government Body
other regulatory body
Implementation Level
national

Timeline of events

11 Apr 2025
adopted

National Cyber Security Centre issued cyber security alert regarding exploitation of vulnerabilities in Fortinet FortiOS products

On 11 April 2025, the National Cyber Security Centre (NCSC) issued a cyber security warning regarding the exploitation of vulnerabilities in Fortinet FortiOS products. In particular, CVE-2022-42475, CVE-2023-27997 and CVE-2024-21762 have been active…

Event type outline
Action type adoption
Government branch executive
Government body other regulatory body