CVE-2024-50565

Summary

CVE-2024-50565 is a vulnerability affecting multiple Fortinet products, including FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiVoice, and FortiWeb. This issue, classified as CWE-923, arises due to an improper restriction of communication channels. An attacker in a man-in-the-middle position can exploit this vulnerability to impersonate the management device (FortiCloud server or FortiManager) by intercepting the FGFM authentication request between the management device and the managed device. This allows the attacker to gain unauthenticated access and potentially compromise the affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.