EPA OW Medium Cybersecurity Alert - Security Vulnerability Affecting FortiWeb Products

Attached is a medium-level cybersecurity alert titled, "Security Vulnerability Affecting FortiWeb Products.” This alert informs water and wastewater system owners and operators about the active exploitation of a newly disclosed vulnerability in Fortinet FortiWeb - a web application firewall.  Currently, there is no indication this vulnerability directly implicates OT systems and would not compromise a water utility's ability to provide clean and safe water, hence the medium level designation.

Please review the alert HERE.