CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-02-15
Fortinet FortiOS / FortiProxy / FortiPAM Format String Vulnerability (CVE-2024-23113) Remote Code Execution (RCE) Analysis and Mitigation Guide
[Affected Scope] FortiOS (7.0.0~7.0.13, 7.2.0~7.2.6, 7.4.0~7.4.2), FortiProxy (7.0.0~7.0.14, 7.2.0~7.2.8, 7.4.0~7.4.2), FortiPAM, and FortiSwitchManager specific versions
[Impact] Unauthenticated remote attackers can execute unauthorized code or commands with root privileges via specially crafted packets
[Mitigation] Upgrade to the official patched versions immediately, or disable the FGFM (FortiGate Federation Management) service on interfaces as a temporary workaround