CVE-2024-55590
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticat
Severity
High 8.6
CVSS 3.1
Exploited
Not listed
EPSS
0.011
61.5th percentile
Discovered by
Not disclosed
Published
Mar 11, 2025
Assigned by fortinet
Description
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI access to execute unauthorized code via specifically crafted CLI commands.
Weakness: CWE-78
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiIsolator | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (1)
- Fortinet · FortiIsolator
Vendor remediation
Please upgrade to FortiIsolator version 2.4.6 or above