Paper/Archive/CVE-2024-48885

CVE-2024-48885

Fortinet FortiVoice — A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.…

EPSS 0.8%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 57.4.574 × 2011.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to escalate privilege via specially crafted packets.

Affected

ProductAffectedFixed inSource

FortiVoice7.0.0 – 7.0.4–CNA

FortiVoice6.4.0 – 6.4.9–CNA

FortiVoice6.0.0 – 6.0.12–CNA

FortiRecorder7.2.0 – 7.2.1–CNA

FortiRecorder7.0.0 – 7.0.4–CNA

FortiWeb7.6.0–CNA

FortiWeb7.4.0 – 7.4.4–CNA

FortiWeb7.2.0 – 7.2.12–CNA

FortiWeb7.0.0 – 7.0.12–CNA

FortiWeb6.4.0 – 6.4.3–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

fortinet (CNA)5.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

reffortiguard.fortinet.com/psirt/FG-IR-24-259