CVE-2024-21762 - Fortinet FortiOS Out-of-Bound Write Vulnerability
Project:Fortinet
Product:FortiOS
Date Added:2024-02-09Due Date:2024-02-16
Vulnerability Name
Fortinet FortiOS Out-of-Bound Write Vulnerability
Description
Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://fortiguard.fortinet.com/psirt/FG-IR-24-015
https://nvd.nist.gov/vuln/detail/CVE-2024-21762
Related News Articles
Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink ExploitApril 12, 2025
Hackers exploit old FortiGate vulnerabilities, use symlink trick to retain limited access to patched devicesApril 12, 2025
Fortinet: Hackers retain access to patched FortiGate VPNs using symlinksApril 12, 2025