CVE-2024-21762
09.02.2024, 09:15
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requestsEnginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiproxy | 1.0.0 ≤ 𝑥 < 2.0.14 |
| fortinet | fortiproxy | 7.0.0 ≤ 𝑥 < 7.0.15 |
| fortinet | fortiproxy | 7.2.0 ≤ 𝑥 < 7.2.9 |
| fortinet | fortiproxy | 7.4.0 ≤ 𝑥 < 7.4.3 |
| fortinet | fortios | 6.0.0 ≤ 𝑥 < 6.0.18 |
| fortinet | fortios | 6.2.0 ≤ 𝑥 < 6.2.16 |
| fortinet | fortios | 6.4.0 ≤ 𝑥 < 6.4.15 |
| fortinet | fortios | 7.0.0 ≤ 𝑥 < 7.0.14 |
| fortinet | fortios | 7.2.0 ≤ 𝑥 < 7.2.7 |
| fortinet | fortios | 7.4.0 ≤ 𝑥 < 7.4.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration