CVE-2024-46663
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifical
Severity
Medium 6.5
CVSS 3.1
Exploited
Not listed
EPSS
0.002
7.2th percentile
Discovered by
Not disclosed
Published
Mar 11, 2025
Assigned by fortinet
Description
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands.
Weakness: CWE-121
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiMail | Email Security | cna-assigner |
Vendor-reported affected versions (1)
- Fortinet · FortiMail
Vendor remediation
Please upgrade to FortiMail version 7.6.2 or above Please upgrade to FortiMail version 7.4.4 or above