CVE-2024-45330
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Oct 8, 2024
Updated: Oct 19, 2024
CWE ID 134
Summary
CVE-2024-45330 is a vulnerability affecting Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, and 7.2.2 through 7.2.5. An attacker can exploit this use-after-free vulnerability by sending specially crafted requests containing externally-controlled format strings. Successful exploitation enables the attacker to escalate their privileges, potentially gaining unauthorized access to sensitive information or system functionality. Fortinet strongly advises users to update their FortiAnalyzer software to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- FortiAnalyzer
Affected Vendors
- Fortinet