by Kastro CVE-2024-21762
Fortinet FortiOS — Fortinet FortiOS Out-of-Bound Write Vulnerability
Description · from the CVE record
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests
Affected
ProductAffectedFixed inSource
FortiOS7.4.0 – 7.4.2–CNA
FortiOS7.2.0 – 7.2.6–CNA
FortiOS7.0.0 – 7.0.13–CNA
FortiOS6.4.0 – 6.4.14–CNA
FortiOS6.2.0 – 6.2.15–CNA
FortiOS6.0.0 – 6.0.18–CNA
FortiProxy7.4.0 – 7.4.2–CNA
FortiProxy7.2.0 – 7.2.8–CNA
FortiProxy7.0.0 – 7.0.14–CNA
FortiProxy2.0.0 – 2.0.13–CNA
FortiProxy1.2.1 – 1.2.13–CNA
FortiProxy01.02.00–CNA
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
fortinet (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:W/RC:C
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total