How severe is CVE-2024-40591?

CVE-2024-40591 has a CVSS v3 score of 8.8 (HIGH).

CVE-2024-40591

Name: fortios
Author: fortinet

8.8HIGH

An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profi

Veröffentlicht: 2/11/2025Aktualisiert: 7/17/2025

Beschreibung

An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profile has the Security Fabric permission to escalate their privileges to super-admin by connecting the targetted FortiGate to a malicious upstream FortiGate they control.

KI-AnalyseKI-gestützt

Betroffene Produkte

fortinetfortios

7.6.0

Referenzen

https://fortiguard.fortinet.com/psirt/FG-IR-24-302
Vendor Advisory