CVE-2024-45325
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a p
Severity
Medium 6.5
CVSS 3.1
Exploited
Not listed
EPSS
0.005
38.8th percentile
Discovered by
Not disclosed
Published
Sep 9, 2025
Assigned by fortinet
Description
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
Weakness: CWE-78
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiDDoS | Threat Detection & Sandbox | cna-assigner |
Vendor-reported affected versions (1)
- Fortinet · FortiDDoS-F
Vendor remediation
Please upgrade to FortiDDoS-F version 7.2.0 or above Please upgrade to FortiDDoS-F version 7.0.3 or above