How severe is CVE-2024-40591?

CVE-2024-40591 has a CVSS v3 score of 8.8 (HIGH).

CVE-2024-40591

Name: fortios
Author: fortinet

8.8HIGH

An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profi

Publicado: 2/11/2025Atualizado: 7/17/2025

Descrição

An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profile has the Security Fabric permission to escalate their privileges to super-admin by connecting the targetted FortiGate to a malicious upstream FortiGate they control.

Análise IADesenvolvido por IA

Produtos Afetados

fortinetfortios

7.6.0

Referências

https://fortiguard.fortinet.com/psirt/FG-IR-24-302
Vendor Advisory