CVE-2024-55591

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12

Severity

Critical 9.6

CVSS 3.1

Remote · no auth what this means

Exploited

Yes — in CISA KEV

Added Jan 14, 2025 · known ransomware use

EPSS

0.941

99.8th percentile

Discovered by

Third party

Vendor advisory field

Published

Jan 14, 2025

Assigned by fortinet

Description

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Weakness: CWE-288

Affected products

Vendor	Product	Category	Matched by
Fortinet	FortiOS Check your version	Firewall / NGFW	cna-assigner
Fortinet	FortiProxy Check your version	SASE / SSE / Secure Web	cna-assigner

Vendor-reported products (2)

Fortinet · FortiOS
Fortinet · FortiProxy

Credit

Fortinet is pleased to thank Sonny of watchTowr ( https://watchtowr.com/) for reporting the CSF related vulnerability under responsible disclosure.

Vendor remediation

Upgrade to FortiOS version 7.0.17 or above Upgrade to FortiProxy version 7.2.13 or above Upgrade to FortiProxy version 7.0.20 or above

References

Something wrong here?