CVE-2024-23110

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands
References
Link Resource
https://fortiguard.com/psirt/FG-IR-23-460 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

History

23 Aug 2024, 02:45

Type Values Removed Values Added
CPE cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
First Time Fortinet
Fortinet fortios
CWE CWE-787
References () https://fortiguard.com/psirt/FG-IR-23-460 - () https://fortiguard.com/psirt/FG-IR-23-460 - Vendor Advisory

13 Jun 2024, 18:36

Type Values Removed Values Added
Summary
  • (es) Un desbordamiento de búfer basado en pila en Fortinet FortiOS versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.6, 7.0.0 a 7.0.13, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15, 6.0 todas las versiones permiten al atacante ejecutar código o comandos no autorizados mediante comandos especialmente manipulados

11 Jun 2024, 15:16

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-11 15:16

Updated : 2024-08-23 02:45


NVD link : CVE-2024-23110

Mitre link : CVE-2024-23110

CVE.ORG link : CVE-2024-23110


JSON object : View

Products Affected

fortinet

  • fortios
CWE
CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow