← Back

CVE-2024-26015

nvd nist
Published: Jul 9, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.7
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.

Affected (4)

Fortinet
2 products
Fortiproxy
Fortios
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Fortiproxy
From 7.0.0 to 7.4.3
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortios
From 7.0.0 to 7.0.15
Fortios
From 7.2.0 to 7.2.8
Fortios
From 7.4.0 to 7.4.3

Related CWEs

CWE-1389
Incorrect Parsing of Numbers with Different Radices
The product parses numeric input assuming base 10 (decimal) values, but it does not account for inputs that use a different base number (radix).
CWE-704
Incorrect Type Conversion or Cast
The product does not correctly convert an object, resource, or structure from one type to a different type.

References (2)

Source: psirt@fortinet.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.