CVE-2024-35279

Summary

CVE-2024-35279 is a stack-based buffer overflow vulnerability affecting Fortinet FortiOS versions 7.2.4 to 7.2.8 and 7.4.0 to 7.4.4. This issue permits a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted UDP packets. The vulnerability (CWE-121) is found in the CAPWAP control and can only be exploited if the attacker manages to bypass FortiOS stack protections and if the fabric service is enabled on the exposed interface.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.