← Back

CVE-2024-21762

nvd nist
Published: Feb 9, 2024Modified: Oct 22, 2026CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests

Affected (10)

Fortinet
2 products
Fortios
Fortiproxy
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortios
6.0.0 ≤ version < 6.0.18
Fortios
6.2.0 ≤ version < 6.2.16
Fortios
6.4.0 ≤ version < 6.4.15
Fortios
7.0.0 ≤ version < 7.0.14
Fortios
7.2.0 ≤ version < 7.2.7
Fortios
7.4.0 ≤ version < 7.4.3
Fortinet
Fortiproxy
1.0.0 ≤ version < 2.0.14
Fortiproxy
7.0.0 ≤ version < 7.0.15
Fortiproxy
7.2.0 ≤ version < 7.2.9
Fortiproxy
7.4.0 ≤ version < 7.4.3

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

Source: psirt@fortinet.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.