CVE-2024-21762

CVE Published 2024-02-09
Related CWE(s) CWE-787: Out-of-bounds Write
Related Vendor(s) fortinet
Related Product(s) fortiproxy, fortios
Exploitation Reported (CISA KEV) 2024-02-09
CVSS 3 Base Score 9.8 (CRITICAL)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References