Decrypting Fortinet's FortiOS 7.0.x | Grey Noise Blog
Summary: GreyNoise Research published a Grimoire post on April 23, 2024 detailing how to decrypt Fortinet's FortiOS 7.0.x firmware, including a hardcoded key used in the ChaCha20 encryption algorithm and the steps to extract the decrypted rootfs.gz file. The post states that with this information, researchers can investigate the relevant vulnerabilities and help users address potential security risks.
Key Takeaway: A hardcoded ChaCha20 key in FortiOS 7.0.x firmware means the encryption protecting that firmware is not a barrier to anyone who reads the published method, and the extracted rootfs is where researchers will look for the vulnerabilities Fortinet users are exposed to.
Read the original at GreyNoise Blog ↗
- Topics
- Detection & Response
- Mentions
- CVE-2026-123158
- Related