CVE-2024-45325
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a p
Severity
Medium 6.5
CVSS 3.1
Exploited
Not listed
EPSS
0.005
39.6th percentile
Discovered by
Vendor
Vendor advisory field
Published
Sep 9, 2025
Assigned by fortinet
Description
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
Weakness: CWE-78
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiDDoS | Threat Detection & Sandbox | cna-assigner |
Vendor-reported products (1)
- Fortinet · FortiDDoS-F
Credit
Internally discovered and reported by Théo Leleu of Fortinet's Product Security team.
Vendor remediation
Please upgrade to FortiDDoS-F version 7.2.0 or above Please upgrade to FortiDDoS-F version 7.0.3 or above