ГлавнаяУязвимости → CVE-2024-21762
9.8критическая

CVE-2024-21762

Описание

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests

Затрагиваемое ПО
Fortinet FortiproxyFortinet Fortios
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://fortiguard.com/psirt/FG-IR-24-015https://fortiguard.com/psirt/FG-IR-24-015https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21762