CVE-2024-31496
6.7MEDIUMA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyze
Veröffentlicht: 11/12/2024Aktualisiert: 1/21/2025
Beschreibung
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
KI-AnalyseKI-gestützt
Betroffene Produkte
fortinetfortianalyzer
fortinetfortianalyzer
fortinetfortianalyzer_big_data
fortinetfortianalyzer_big_data
7.4.0
fortinetfortimanager
fortinetfortimanager
Referenzen
- https://fortiguard.fortinet.com/psirt/FG-IR-24-098Vendor Advisory