CVE-2024-55591—Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

漏洞名称

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

描述

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://fortiguard.fortinet.com/psirt/FG-IR-24-535
• https://nvd.nist.gov/vuln/detail/CVE-2024-55591

相关新闻文章

• The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a WormJune 11, 2026
• Nissan confirms design studio data breach claimed by Qilin ransomwareAugust 26, 2025
• The Heat Wasn't Just Outside: Cyber Attacks Spiked in Summer 2025August 5, 2025
• Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 AttacksJune 11, 2025
• Critical Fortinet flaws now exploited in Qilin ransomware attacksJune 6, 2025

相关 CWE

• CWE-288