How severe is CVE-2024-40591?

CVE-2024-40591 has a CVSS v3 score of 8.8 (HIGH).

CVE-2024-40591

Name: fortios
Author: fortinet

8.8HIGH

An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profi

게시됨: 2/11/2025업데이트됨: 7/17/2025

설명

An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profile has the Security Fabric permission to escalate their privileges to super-admin by connecting the targetted FortiGate to a malicious upstream FortiGate they control.

AI 분석AI 기반

영향받는 제품

fortinetfortios

7.6.0

참조

https://fortiguard.fortinet.com/psirt/FG-IR-24-302
Vendor Advisory