CVE-2024-35273

Published: Jan 14, 2025Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

Affected (4)

Products: Fortinet: Fortianalyzer, Fortianalyzer Cloud, Fortimanager, Fortimanager Cloud

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortianalyzer	From 7.4.0 to 7.4.4
Fortinet Fortianalyzer Cloud	From 7.4.1 to 7.4.3
Fortinet Fortimanager	From 7.4.0 to 7.4.3
Fortinet Fortimanager Cloud	From 7.4.1 to 7.4.3

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://fortiguard.fortinet.com/psirt/FG-IR-24-106

Source: psirt@fortinet.com

Vendor Advisory

Timeline

No history available yet.