← Back

CVE-2024-23110

nvd nist
Published: Jun 11, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands

Affected (5)

Products: Fortinet: Fortios
Fortinet
1 product
Fortios
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortios
From 6.0.0 to 6.2.16
Fortios
From 6.4.0 to 6.4.15
Fortios
From 7.0.0 to 7.0.14
Fortios
From 7.2.0 to 7.2.7
Fortios
From 7.4.0 to 7.4.3

Related CWEs

CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: psirt@fortinet.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.