CVE-2024-23113—Fortinet Multiple Products Format String Vulnerability

漏洞名称

Fortinet Multiple Products Format String Vulnerability

描述

Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://www.fortiguard.com/psirt/FG-IR-24-029
• https://nvd.nist.gov/vuln/detail/CVE-2024-23113

相关新闻文章

• CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day AttackOctober 22, 2024
• 87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113)October 15, 2024
• CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security PatchesOctober 10, 2024
• CISA says critical Fortinet RCE flaw now exploited in attacksOctober 9, 2024

相关 CWE

• CWE-134