This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Fortinet FortiManager fixes a critical vulnerability
Fortinet fixes a critical vulnerability in FortiManager Cloud in versions 7.4.5, 7.2.8 and 7.0.13 [1].
An unauthenticated remote attacker can execute code and commands in the operating system without authorization by sending specially crafted requests. Besides complete takeover of the machine, this may also mean exfiltration of IP addresses, credentials and configurations related to the machines managed by the given FortiManager instance. Fortinet warns that this vulnerability is already being actively exploited. Information on the temporary fix, IoCs and recovery in case of confirmed compromise can be found at [1].
The vulnerability is present in product:
- FortiManager Cloud; >=7.4.1, <7.4.5; >=7.2.1, <7.2.8; >=7.0.1, <7.0.13; >=6.4, <6.5;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2024-47575 at cve.org, NVD
- CWE-306: Missing Authentication for Critical Function at cwe.mitre.org
The vulnerability was publicly disclosed 23. 10. 2024.
By CESNET, z.s.p.o. Martin Krajči on 30. 10. 2024.