Description
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.4.0 – ≤ 7.4.2, 7.2.0 – ≤ 7.2.6, 7.0.0 – ≤ 7.0.13, 6.4.0 – ≤ 6.4.14, 6.2.0 – ≤ 6.2.15, 6.0.0 – ≤ 6.0.18 | — |
Advisories 4
- ICSA-24-074-05 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Jan 14, 2026
- SSA-832273 SSA-832273: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Jan 13, 2026
- NCSC-2024-0261 Kwetsbaarheid verholpen in Fortinet FortiOS NCSC-NL (Netherlands) · Jun 14, 2024
- WID-SEC-2024-1358 Fortinet FortiOS: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Jun 11, 2024