CVE-2024-45325
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a p
Exploited
Not listed
EPSS
0.005
38.2th percentile
Discovered by
Vendor
Vendor advisory field
Published
Sep 9, 2025
Assigned by fortinet
Description
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
Weakness: CWE-78
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiDDoS | Threat Detection & Sandbox | cna-assigner |
Vendor-reported products (1)
- Fortinet · FortiDDoS-F
Credit
Internally discovered and reported by Théo Leleu of Fortinet's Product Security team.
Vendor remediation
Please upgrade to FortiDDoS-F version 7.2.0 or above Please upgrade to FortiDDoS-F version 7.0.3 or above