Critical 2 exploited CVEs WID-SEC-2024-0330 2 CVEs

Fortinet FortiOS: Mehrere Schwachstellen ermöglichen Codeausführung

Published Feb 8, 2024 · Updated Oct 9, 2024 · Revision 2 · de-DE

Vendor: Fortinet Product: FortiOS

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiOS ausnutzen, um beliebigen Code auszuführen.

Product

FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.

Vulnerabilities 2

Critical 9.8

CVE-2024-23113 Exploited Public exploit EPSS 62%

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Feb 15, 2024
KEV Oct 9, 2024
Critical 9.6

CVE-2024-21762 Exploited · Ransomware Public exploit EPSS 85%

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0…

Fortinet FortiOS FortiProxy Network devices

Feb 9, 2024
KEV Feb 9, 2024

Revision history

2024-10-09 #2
Aktive Ausnutzung gemeldet
2024-02-08 #1
Initiale Fassung

References

FortiGuard PSIRT Advisory FG-IR-24-015 vom 2024-02-08
https://fortiguard.fortinet.com/psirt/FG-IR-24-015
FortiGuard PSIRT Advisory FG-IR-24-029 vom 2024-02-08
https://fortiguard.fortinet.com/psirt/FG-IR-24-029
Known Exploited Vulnerabilities Catalog vom 2024-10-09
https://www.cisa.gov/known-exploited-vulnerabilities-catalog