CVE-2024-32118

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 78

Summary

CVE-2024-32118 is a critical OS Command Injection vulnerability affecting Fortinet FortiManager versions 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer versions 7.4.0 through 7.4.2 and before 7.2.5, and Fortinet FortiAnalyzer-BigData before 7.4.0. An authenticated privileged attacker can exploit this vulnerability (CWE-78) by sending crafted CLI requests, allowing them to execute unauthorized code or commands. This issue poses a significant risk, as it can lead to serious security implications, including data theft, system compromise, and unauthorized access. Fortinet strongly recommends users upgrade to the latest patched versions to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • FortiAnalyzer
  • FortiManager

Affected Vendors

  • Fortinet