NCSC-2025-0018 — Kwetsbaarheden verholpen in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS en FortiProxy

Summary

Fortinet heeft kwetsbaarheden verholpen in FortiSwitch, FortiManager, FortiAnalyzer, FortiOS en FortiProxy.

Details

Interpretaties
De kwetsbaarheden omvatten onder andere hard-coded cryptografische sleutels, onjuiste verwerking van OS-commando's, en out-of-bounds schrijf- en leesfouten. Aanvallers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te verkrijgen, willekeurige code uit te voeren en Denial-of-Service-aanvallen te veroorzaken.

Oplossingen
Fortinet heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 30

Critical 9.6

CVE-2024-21762 Exploited · Ransomware Public exploit EPSS 85%

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0…

Fortinet FortiOS FortiProxy Network devices

Feb 9, 2024
KEV Feb 9, 2024
Critical 9.6

CVE-2023-37936

A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7…

Fortinet FortiSwitch Network devices

Jan 14, 2025
High 8.6

CVE-2023-42791 Public exploit

A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.…

Fortinet FortiManager FortiAnalyzer Network devices

Feb 20, 2024
High 8.4

CVE-2024-35277

A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager versi…

Fortinet FortiManager Network devices

Jan 14, 2025
High 8.3

CVE-2024-27778

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet F…

Fortinet FortiSandbox Network devices

Jan 14, 2025
High 8.3

CVE-2024-46662

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions…

Fortinet FortiManager Network devices

Mar 14, 2025
High 8.0

CVE-2024-48886

A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.…

Fortinet FortiOS FortiProxy Network devices

Jan 14, 2025
High 7.9

CVE-2024-47571

An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker…

Fortinet FortiManager Network devices

Jan 14, 2025
High 7.6

CVE-2023-37937

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch v…

Fortinet FortiSwitch Network devices

Jan 14, 2025
High 7.5

CVE-2024-46670

An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and belo…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Jan 14, 2025
High 7.2

CVE-2024-50566

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …

Fortinet FortiManager FortiManager Cloud Network devices

Jan 14, 2025
High 7.1

CVE-2024-46668

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4…

Fortinet FortiOS Network devices

Jan 14, 2025
High 7.0

CVE-2024-35273

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 a…

Fortinet FortiManager FortiAnalyzer Network devices

Jan 14, 2025
High 7.0

CVE-2024-36512

An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyz…

Fortinet FortiManager FortiAnalyzer Network devices

Jan 14, 2025
Medium 6.7

CVE-2024-33503

A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.…

Fortinet FortiManager FortiManager Cloud Network devices

Jan 14, 2025
Medium 6.7

CVE-2024-48884 EPSS 15%

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager…

Fortinet FortiOS FortiManager FortiProxy Network devices

Jan 14, 2025
Medium 6.5

CVE-2024-35275

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer versio…

Fortinet FortiManager FortiAnalyzer Network devices

Jan 14, 2025
Medium 6.4

CVE-2023-42785

A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all vers…

Fortinet FortiOS Network devices

Jan 14, 2025
Medium 6.4

CVE-2024-33502

An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyz…

Fortinet FortiManager FortiAnalyzer Network devices

Jan 14, 2025
Medium 6.4

CVE-2024-54021

An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in For…

Fortinet FortiOS FortiProxy Network devices

Jan 14, 2025
Medium 6.3

CVE-2024-26012

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2 …

Fortinet FortiAP-W2 FortiAP FortiAP-S Network devices

Jan 14, 2025
Medium 6.2

CVE-2024-36504

An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0…

Fortinet FortiOS Network devices

Jan 14, 2025
Medium 5.2

CVE-2024-32115

A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 …

Fortinet FortiManager Network devices

Jan 14, 2025
Medium 5.0

CVE-2024-35276

A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through …

Fortinet FortiManager FortiAnalyzer FortiManager Cloud Network devices

Jan 14, 2025
Medium 4.8

CVE-2024-46666

An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4…

Fortinet FortiOS Network devices

Jan 14, 2025
Medium 4.7

CVE-2023-46715

An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and versio…

Fortinet FortiOS FortiProxy Network devices

Jan 14, 2025
Medium 4.1

CVE-2022-23439

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison w…

Fortinet FortiOS FortiManager FortiProxy Network devices

Jan 22, 2025
Low 3.5

CVE-2024-46665

An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may …

Fortinet FortiOS Network devices

Jan 14, 2025
Low 3.5

CVE-2024-52963

A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Jan 14, 2025
Low 3.2

CVE-2024-46669

An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSA…

Fortinet FortiOS Network devices

Jan 14, 2025

Revision history

2025-01-15 #0
Initiele versie

References

Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-239
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-143
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-097
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-152
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-222
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-326
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-282
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-23-405
Reference - certbundde
https://www.fortiguard.com/psirt/FG-IR-23-260
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-23-407
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-267
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-135
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-219
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-127
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-23-293
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-463
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-061
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-373
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-259
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-106
Reference - certbundde
https://www.fortiguard.com/psirt/FG-IR-23-258
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-091
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-23-473
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-165
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-250
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-221
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-23-494

Kwetsbaarheden verholpen in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS en FortiProxy

Summary

Details

Vulnerabilities 30

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0…

A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7…

A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.…

A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager versi…

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet F…

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions…

A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.…

An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker…

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch v…

An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and belo…

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4…

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 a…

An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyz…

A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.…

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager…

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer versio…

A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all vers…

An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyz…

An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in For…

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2 …

An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0…

A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 …

A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through …

An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4…

An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and versio…

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison w…

An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may …

A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.…

An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSA…

Revision history

References