CVEvulnerability
CVE-2024-23110
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-06-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-121, CWE-787
Description
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands
Affected configurations
• fortinet fortios (>= 6.0.0 < 6.2.16)
• fortinet fortios (>= 6.4.0 < 6.4.15)
• fortinet fortios (>= 7.0.0 < 7.0.14)
• fortinet fortios (>= 7.2.0 < 7.2.7)
• fortinet fortios (>= 7.4.0 < 7.4.3)
Related
References
- https://fortiguard.com/psirt/FG-IR-23-460 Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-23-460 Vendor Advisory