CyberCVE

CVE-2024-35276

A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.0 through 6.4.14, Fo

Severity
Medium 5
CVSS 3.1
Exploited
Not listed
EPSS
0.004
35.9th percentile
Discovered by
Vendor
Vendor advisory field
Published
Jan 14, 2025
Assigned by fortinet

Description

A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.0 through 6.4.14, FortiAnalyzer Cloud 7.4.1 through 7.4.3, FortiAnalyzer Cloud 7.2.1 through 7.2.5, FortiAnalyzer Cloud 7.0.1 through 7.0.11, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0.1 through 7.0.11, FortiManager Cloud 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.

Weakness: CWE-121

Affected products

Vendor Product Category Matched by
Fortinet FortiAnalyzer SIEM & Log Management cna-assigner
Fortinet FortiManager Network & Security Management cna-assigner
Vendor-reported products (4)
  • Fortinet · FortiAnalyzer
  • Fortinet · FortiManager Cloud
  • Fortinet · FortiAnalyzer Cloud
  • Fortinet · FortiManager

Credit

Internally discovered and reported by Gwendal Guégniaud of Fortinet Product Security Team.

Vendor remediation

Upgrade to upcoming FortiPortal version 6.0.16 or above Upgrade to FortiAnalyzer version 7.6.0 or above Upgrade to FortiAnalyzer version 7.4.4 or above Upgrade to FortiAnalyzer version 7.2.6 or above Upgrade to FortiAnalyzer version 7.0.13 or above Upgrade to FortiAnalyzer version 6.4.15 or above Upgrade to FortiAnalyzer Cloud version 7.4.4 or above Upgrade to FortiAnalyzer Cloud version 7.2.6 or above Upgrade to FortiAnalyzer Cloud version 7.0.12 or above Upgrade to FortiManager version 7.6.0 or above Upgrade to FortiManager version 7.4.4 or above Upgrade to FortiManager version 7.2.6 or above Upgrade to FortiManager version 7.0.13 or above Upgrade to FortiManager version 6.4.15 or above Upgrade to FortiManager Cloud version 7.4.4 or above Upgrade to FortiManager Cloud version 7.2.6 or above Upgrade to FortiManager Cloud version 7.0.12 or above

References

Something wrong here?