CyberCVE

CVE-2024-35273

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

Severity
High 7
CVSS 3.1
Exploited
Not listed
EPSS
0.006
47.7th percentile
Discovered by
Not disclosed
Published
Jan 14, 2025
Assigned by fortinet

Description

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

Weakness: CWE-787

Affected products

Vendor Product Category Matched by
Fortinet FortiAnalyzer SIEM & Log Management cna-assigner
Fortinet FortiManager Network & Security Management cna-assigner
Vendor-reported affected versions (2)
  • Fortinet · FortiAnalyzer
  • Fortinet · FortiManager

Vendor remediation

Please upgrade to FortiAnalyzer Cloud version 7.4.3 or above Please upgrade to FortiOS version 7.6.0 or above Please upgrade to FortiSwitchManager version 7.2.4 or above Please upgrade to FortiProxy version 7.4.5 or above Please upgrade to FortiPAM version 1.3.0 or above Please upgrade to FortiADC version 7.6.0 or above Please upgrade to FortiAuthenticator version 7.0.0 or above Please upgrade to FortiAnalyzer version 7.6.0 or above Please upgrade to FortiAnalyzer version 7.4.4 or above Please upgrade to FortiManager version 7.4.3 or above Please upgrade to FortiManager Cloud version 7.4.3 or above

References