CVE-2024-21762
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, Fort
Description
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests
Weakness: CWE-787
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiOS Check your version | Firewall / NGFW | cna-assigner |
| Fortinet | FortiProxy Check your version | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported products (11)
- Fortinet · FortiOS
- Fortinet · FortiProxy
- fortinet · fortiproxy
- fortinet · fortiproxy
- fortinet · fortiproxy
- fortinet · fortiproxy
- fortinet · fortios
- fortinet · fortios
- fortinet · fortios
- fortinet · fortios
- fortinet · fortios
Credit
Internal
Vendor remediation
Upgrade to FortiProxy version 7.4.3 or above Upgrade to FortiProxy version 7.2.9 or above Upgrade to FortiProxy version 7.0.15 or above Upgrade to FortiProxy version 2.0.14 or above Upgrade to FortiOS version 7.4.3 or above Upgrade to FortiOS version 7.2.7 or above Upgrade to FortiOS version 7.0.14 or above Upgrade to FortiOS version 6.4.15 or above Upgrade to FortiOS version 6.2.16 or above