Fortinet PSIRT Monthly Advisories — February 2025

Tuesday, 11 February 2025

Vulnerabilities: 15
Critical: 0
High: 4
Zero-days: 0
Public exploit: 2

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.1
CVE-2025-24472 Exploited Public exploit An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12,…
EPSS 7.2%

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

Medium 6.3
CVE-2024-40586 Public exploit An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local us…

All vulnerabilities 15

High4 Show

High 8.1
CVE-2025-24472 Exploited Public exploit An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12,…
EPSS 7.2%
High 8.1
CVE-2025-24470 An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a rem…
EPSS 1.3%
High 8.0
CVE-2024-40591 An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows …
High 7.7
CVE-2024-35279 A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthent…
EPSS 1%

Medium8 Show

Medium 6.9
CVE-2024-27781 An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbo…
EPSS 28%
Medium 6.8
CVE-2024-40584 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 th…
EPSS 2%
Medium 6.8
CVE-2024-50567 An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execu…
EPSS 2.2%
Medium 6.3
CVE-2024-40586 Public exploit An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local us…
Medium 6.3
CVE-2023-40721 A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or comman…
Medium 6.3
CVE-2024-50569 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execut…
EPSS 1.8%
Medium 5.9
CVE-2024-36508 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 a…
Medium 5.8
CVE-2024-52968 An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.

Low3 Show

Low 3.9
CVE-2024-33504 A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through…
Low 2.2
CVE-2024-27780 Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all v…
Low 2.2
CVE-2024-52966 An exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0 through 7.6.0 allows attacker to cause information disclosure via…