CVE-2024-31496

6.7MEDIUM

A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyze

Published: 11/12/2024Updated: 1/21/2025
View on NVDView on MITRE

Description

A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.

AI AnalysisPowered by AI

Affected Products

fortinetfortianalyzer
fortinetfortianalyzer
fortinetfortianalyzer_big_data
fortinetfortianalyzer_big_data
7.4.0
fortinetfortimanager
fortinetfortimanager

References