CVE-2024-32118
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Summary
CVE-2024-32118 is a critical OS Command Injection vulnerability affecting Fortinet FortiManager versions 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer versions 7.4.0 through 7.4.2 and before 7.2.5, and Fortinet FortiAnalyzer-BigData before 7.4.0. An authenticated privileged attacker can exploit this vulnerability (CWE-78) by sending crafted CLI requests, allowing them to execute unauthorized code or commands. This issue poses a significant risk, as it can lead to serious security implications, including data theft, system compromise, and unauthorized access. Fortinet strongly recommends users upgrade to the latest patched versions to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- FortiAnalyzer
- FortiManager
Affected Vendors
- Fortinet