CVE-2024-21762 - Fortinet FortiOS Out-of-Bound Write Vulnerability
Project:Fortinet
Product:FortiOS
Date Added:2024-02-09Due Date:2024-02-16
Vulnerability Name
Fortinet FortiOS Out-of-Bound Write Vulnerability
Description
Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.
Known To Be Used in Ransomware Campaigns?
Known
Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://fortiguard.fortinet.com/psirt/FG-IR-24-015
https://nvd.nist.gov/vuln/detail/CVE-2024-21762
Related News Articles
Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 AttacksJune 12, 2025
Critical Fortinet flaws now exploited in Qilin ransomware attacksJune 6, 2025
Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink ExploitApril 12, 2025
Hackers exploit old FortiGate vulnerabilities, use symlink trick to retain limited access to patched devicesApril 12, 2025
Fortinet: Hackers retain access to patched FortiGate VPNs using symlinksApril 12, 2025