CVE-2024-55590
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 78
Summary
CVE-2024-55590 is a critical OS Command Injection vulnerability affecting Fortinet FortiIsolator versions 2.4.0 through 2.4.5. An authenticated attacker with read-only admin permissions and CLI access can exploit this vulnerability (CWE-78) by submitting crafted CLI commands. Successful exploitation allows the attacker to execute unauthorized code, potentially leading to serious security implications. Fortinet strongly advises users to update their FortiIsolator software as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Fortinet