Vulnerabilities > CVE-2024-26010 - Out-of-bounds Write vulnerability in Fortinet products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

fortinet

CWE-787

NVD

Published: 2024-06-11

Updated: 2024-12-11

Summary

A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.

Vulnerable Configurations

Part	Description	Count
OS	Fortinet Fortinet Fortios 7.2.0 Fortinet Fortios 7.2.1 Fortinet Fortios 7.2.2 Fortinet Fortios 7.2.3 Fortinet Fortios 7.2.4 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.6 Fortinet Fortios 7.2.7 Fortinet Fortios 7.2.8 Fortinet Fortios 7.4.0 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.3 Fortinet Fortios 6.0.0 Fortinet Fortios 6.0.1 Fortinet Fortios 6.0.2 Fortinet Fortios 6.0.3 Fortinet Fortios 6.0.4 Fortinet Fortios 6.0.5 Fortinet Fortios 6.0.6 Fortinet Fortios 6.0.7 Fortinet Fortios 6.0.8 Fortinet Fortios 6.0.9 Fortinet Fortios 6.0.10 Fortinet Fortios 6.0.11 Fortinet Fortios 6.0.12 Fortinet Fortios 6.0.13 Fortinet Fortios 6.0.14 Fortinet Fortios 6.0.15 Fortinet Fortios 6.0.16 Fortinet Fortios 6.0.17 Fortinet Fortios 6.0.18 Fortinet Fortios 6.2.0 Fortinet Fortios 6.2.1 Fortinet Fortios 6.2.2 Fortinet Fortios 6.2.3 Fortinet Fortios 6.2.4 Fortinet Fortios 6.2.5 Fortinet Fortios 6.2.6 Fortinet Fortios 6.2.7 Fortinet Fortios 6.2.8 Fortinet Fortios 6.2.9 Fortinet Fortios 6.2.10 Fortinet Fortios 6.2.11 Fortinet Fortios 6.2.12 Fortinet Fortios 6.2.13 Fortinet Fortios 6.2.14 Fortinet Fortios 6.2.15 Fortinet Fortios 6.2.16 Fortinet Fortios 6.4.0 Fortinet Fortios 6.4.1 Fortinet Fortios 6.4.2 Fortinet Fortios 6.4.3 Fortinet Fortios 6.4.4 Fortinet Fortios 6.4.5 Fortinet Fortios 6.4.6 Fortinet Fortios 6.4.7 Fortinet Fortios 6.4.8 Fortinet Fortios 6.4.9 Fortinet Fortios 6.4.10 Fortinet Fortios 6.4.11 Fortinet Fortios 6.4.12 Fortinet Fortios 6.4.13 Fortinet Fortios 6.4.14 Fortinet Fortios 6.4.15 Fortinet Fortios 7.0.0 Fortinet Fortios 7.0.1 Fortinet Fortios 7.0.2 Fortinet Fortios 7.0.3 Fortinet Fortios 7.0.4 Fortinet Fortios 7.0.5 Fortinet Fortios 7.0.6 Fortinet Fortios 7.0.7 Fortinet Fortios 7.0.8 Fortinet Fortios 7.0.9 Fortinet Fortios 7.0.10 Fortinet Fortios 7.0.11 Fortinet Fortios 7.0.12 Fortinet Fortios 7.0.13 Fortinet Fortios 7.0.14 Fortinet Fortipam 1.0.0 Fortinet Fortipam 1.0.1 Fortinet Fortipam 1.0.2 Fortinet Fortipam 1.0.3 Fortinet Fortipam 1.1.0 Fortinet Fortipam 1.1.1 Fortinet Fortipam 1.2.0 Fortinet Fortipam 1.3.0	88
Application	Fortinet Fortinet Fortiproxy 1.0.0 Fortinet Fortiproxy 1.0.1 Fortinet Fortiproxy 1.0.2 Fortinet Fortiproxy 1.0.3 Fortinet Fortiproxy 1.0.4 Fortinet Fortiproxy 1.0.5 Fortinet Fortiproxy 1.0.6 Fortinet Fortiproxy 1.0.7 Fortinet Fortiproxy 1.1.0 Fortinet Fortiproxy 1.1.1 Fortinet Fortiproxy 1.1.2 Fortinet Fortiproxy 1.1.3 Fortinet Fortiproxy 1.1.4 Fortinet Fortiproxy 1.1.5 Fortinet Fortiproxy 1.1.6 Fortinet Fortiproxy 1.2.0 Fortinet Fortiproxy 1.2.1 Fortinet Fortiproxy 1.2.2 Fortinet Fortiproxy 1.2.3 Fortinet Fortiproxy 1.2.4 Fortinet Fortiproxy 1.2.5 Fortinet Fortiproxy 1.2.6 Fortinet Fortiproxy 1.2.7 Fortinet Fortiproxy 1.2.8 Fortinet Fortiproxy 1.2.9 Fortinet Fortiproxy 1.2.10 Fortinet Fortiproxy 1.2.11 Fortinet Fortiproxy 1.2.12 Fortinet Fortiproxy 1.2.13 Fortinet Fortiproxy 2.0.0 Fortinet Fortiproxy 2.0.1 Fortinet Fortiproxy 2.0.2 Fortinet Fortiproxy 2.0.3 Fortinet Fortiproxy 2.0.4 Fortinet Fortiproxy 2.0.5 Fortinet Fortiproxy 2.0.6 Fortinet Fortiproxy 2.0.7 Fortinet Fortiproxy 2.0.8 Fortinet Fortiproxy 2.0.9 Fortinet Fortiproxy 2.0.10 Fortinet Fortiproxy 2.0.11 Fortinet Fortiproxy 2.0.12 Fortinet Fortiproxy 2.0.13 Fortinet Fortiproxy 2.0.14 Fortinet Fortiproxy 7.0.0 Fortinet Fortiproxy 7.0.1 Fortinet Fortiproxy 7.0.2 Fortinet Fortiproxy 7.0.3 Fortinet Fortiproxy 7.0.4 Fortinet Fortiproxy 7.0.5 Fortinet Fortiproxy 7.0.6 Fortinet Fortiproxy 7.0.7 Fortinet Fortiproxy 7.0.8 Fortinet Fortiproxy 7.0.9 Fortinet Fortiproxy 7.0.10 Fortinet Fortiproxy 7.0.11 Fortinet Fortiproxy 7.0.12 Fortinet Fortiproxy 7.0.13 Fortinet Fortiproxy 7.0.14 Fortinet Fortiproxy 7.0.15 Fortinet Fortiproxy 7.0.16 Fortinet Fortiproxy 7.2.0 Fortinet Fortiproxy 7.2.1 Fortinet Fortiproxy 7.2.2 Fortinet Fortiproxy 7.2.3 Fortinet Fortiproxy 7.2.4 Fortinet Fortiproxy 7.2.5 Fortinet Fortiproxy 7.2.6 Fortinet Fortiproxy 7.2.7 Fortinet Fortiproxy 7.2.8 Fortinet Fortiproxy 7.2.9 Fortinet Fortiproxy 7.4.0 Fortinet Fortiproxy 7.4.1 Fortinet Fortiproxy 7.4.2 Fortinet Fortiproxy 7.4.3 Fortinet Fortiswitchmanager 7.0.1 Fortinet Fortiswitchmanager 7.0.2 Fortinet Fortiswitchmanager 7.0.3 Fortinet Fortiswitchmanager 7.2.0 Fortinet Fortiswitchmanager 7.2.1 Fortinet Fortiswitchmanager 7.2.2 Fortinet Fortiswitchmanager 7.2.3	82

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References