One-time upgrade prompt when a critical vulnerability is detected upon login

When FortiOS detects a critical vulnerability, a prompt appears for a one-time upgrade after logging into the FortiGate. A warning message is displayed in the GUI about the critical vulnerability and allows the administrator to either upgrade or skip it. This ensures that the administrator is aware of any potential security risks and can take immediate action to address them.

Clicking the hyperlinked vulnerability name opens the Security Fabric > Security Rating page, which displays more information about the vulnerability. See PSIRT-related notifications for more information.

Clicking the Upgrade button opens the System > Firmware & Registration page where the administrator can upgrade the device. See Firmware & Registration for more information.

Clicking the Skip upgrade & I understand the risk button continues the log in process as usual.

Diagnostics

To view vulnerability results after performing security rating scan:

# diagnose report-runner vuln-read
Index: 0
Name: FG-IR-23-001: FortiOS / FortiManager / FortiAnalyzer / FortiWeb / FortiProxy / FortiSwitchManager - Heap buffer underflow in administrative interface
FortiGate Serial: FGVM02TM23000000

To clear the vulnerability result:

# diagnose report-runner vuln-clean 
Deleted temporary critical vulnerability file