CVE-2024-46663
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifical
Severity
Medium 6.5
CVSS 3.1
Exploited
Not listed
EPSS
0.002
7.9th percentile
Discovered by
Vendor
Vendor advisory field
Published
Mar 11, 2025
Assigned by fortinet
Description
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands.
Weakness: CWE-121
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiMail | Email Security | cna-assigner |
Vendor-reported products (1)
- Fortinet · FortiMail
Credit
Internally reported and discovered by Théo Leleu of Fortinet Product Security team.
Vendor remediation
Please upgrade to FortiMail version 7.6.2 or above Please upgrade to FortiMail version 7.4.4 or above