CVE-2024-23110

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:56

Type Values Removed Values Added
References () https://fortiguard.com/psirt/FG-IR-23-460 - Vendor Advisory () https://fortiguard.com/psirt/FG-IR-23-460 - Vendor Advisory

23 Aug 2024, 02:45

Type Values Removed Values Added
CPE cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
CWE CWE-787
References () https://fortiguard.com/psirt/FG-IR-23-460 - () https://fortiguard.com/psirt/FG-IR-23-460 - Vendor Advisory
First Time Fortinet
Fortinet fortios

13 Jun 2024, 18:36

Type Values Removed Values Added
Summary
  • (es) Un desbordamiento de búfer basado en pila en Fortinet FortiOS versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.6, 7.0.0 a 7.0.13, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15, 6.0 todas las versiones permiten al atacante ejecutar código o comandos no autorizados mediante comandos especialmente manipulados

11 Jun 2024, 15:16

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-11 15:16

Updated : 2024-11-21 08:56


NVD link : CVE-2024-23110

Mitre link : CVE-2024-23110

CVE.ORG link : CVE-2024-23110


JSON object : View

Products Affected

fortinet

  • fortios
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write