Description
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.4.0 – ≤ 7.4.1, 7.2.0 – ≤ 7.2.7, 7.0.0 – ≤ 7.0.12, 6.4.6 – ≤ 6.4.15, 6.2.9 – ≤ 6.2.16, 6.0.13 – ≤ 6.0.18 | — |
Advisories 5
- ICSA-24-193-02 Siemens RUGGEDCOM APE 1808 CISA ICS & IT advisories · Jan 14, 2026
- SSA-698820 SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Jan 13, 2026
- NCSC-2024-0282 Kwetsbaarheden verholpen in Siemens Producten NCSC-NL (Netherlands) · Jul 9, 2024
- NCSC-2024-0261 Kwetsbaarheid verholpen in Fortinet FortiOS NCSC-NL (Netherlands) · Jun 14, 2024
- WID-SEC-2024-1358 Fortinet FortiOS: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Jun 11, 2024