CVE-2024-46670

Summary

CVE-2024-46670 is an Out-of-bounds Read vulnerability [CWE-125] affecting FortiOS versions 7.6.0, 7.4.4 and below, and 7.2.9 and below, as well as FortiSASE FortiOS tenant version 24.3.b. This issue allows unauthenticated remote attackers to trigger memory consumption, potentially leading to Denial of Service conditions. The vulnerability arises due to improper handling of crafted requests in the IPsec IKE service. Successful exploitation could result in significant resource usage and unavailability of affected Fortinet devices. Organizations using these versions of FortiOS or FortiSASE are strongly advised to update to the latest, secure releases as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.