CVE-2024-31496
6.7MEDIUMA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyze
게시됨: 11/12/2024업데이트됨: 1/21/2025
설명
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
AI 분석AI 기반
영향받는 제품
fortinetfortianalyzer
fortinetfortianalyzer
fortinetfortianalyzer_big_data
fortinetfortianalyzer_big_data
7.4.0
fortinetfortimanager
fortinetfortimanager
참조
- https://fortiguard.fortinet.com/psirt/FG-IR-24-098Vendor Advisory