CyberCVE

CVE-2024-40588

Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMa

Severity
Medium 4.2
CVSS 3.1
Exploited
Not listed
EPSS
0.002
7.2th percentile
Discovered by
Not disclosed
Published
Aug 12, 2025
Assigned by fortinet

Description

Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMail 7.6.0 through 7.6.1, FortiMail 7.4.0 through 7.4.3, FortiMail 7.2 all versions, FortiMail 7.0 all versions, FortiMail 6.4 all versions, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.6, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiRecorder 6.4 all versions, FortiVoice 7.0.0 through 7.0.3, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions may allow a privileged attacker to read files from the underlying filesystem via crafted CLI requests.

Weakness: CWE-23

Affected products

Vendor Product Category Matched by
Fortinet FortiCamera Other Products cna-assigner
Fortinet FortiMail Email Security cna-assigner
Fortinet FortiNDR Threat Detection & Sandbox cna-assigner
Fortinet FortiRecorder Other Products cna-assigner
Fortinet FortiVoice Other Products cna-assigner
Vendor-reported affected versions (5)
  • Fortinet · FortiCamera
  • Fortinet · FortiNDR
  • Fortinet · FortiMail
  • Fortinet · FortiRecorder
  • Fortinet · FortiVoice

Vendor remediation

Upgrade to upcoming FortiCamera version 2.0.1 or above Upgrade to FortiNDR version 7.6.2 or above Upgrade to FortiNDR version 7.4.7 or above Upgrade to FortiMail version 7.6.2 or above Upgrade to FortiMail version 7.4.4 or above Upgrade to FortiRecorder version 7.2.2 or above Upgrade to FortiRecorder version 7.0.5 or above Upgrade to FortiFone version 3.0.24 or above Upgrade to FortiVoice version 7.2.0 or above Upgrade to FortiVoice version 7.0.5 or above Upgrade to FortiVoice version 6.4.10 or above

References