Vulnerabilities > CVE-2024-31496 - Out-of-bounds Write vulnerability in Fortinet Fortianalyzer, Fortianalyzer BIG Data and Fortimanager

CVSS 6.7 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

fortinet

CWE-787

NVD

Published: 2024-11-12

Updated: 2025-01-21

Summary

A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.

Vulnerable Configurations

Part	Description	Count
Application	Fortinet Fortinet Fortimanager 7.4.0 Fortinet Fortimanager 7.4.1 Fortinet Fortimanager 7.4.2 Fortinet Fortimanager 6.2.0 Fortinet Fortimanager 6.2.1 Fortinet Fortimanager 6.2.2 Fortinet Fortimanager 6.2.3 Fortinet Fortimanager 6.2.4 Fortinet Fortimanager 6.2.5 Fortinet Fortimanager 6.2.6 Fortinet Fortimanager 6.2.7 Fortinet Fortimanager 6.2.8 Fortinet Fortimanager 6.2.9 Fortinet Fortimanager 6.2.10 Fortinet Fortimanager 6.2.11 Fortinet Fortimanager 6.2.12 Fortinet Fortimanager 6.2.13 Fortinet Fortimanager 6.4.0 Fortinet Fortimanager 6.4.1 Fortinet Fortimanager 6.4.2 Fortinet Fortimanager 6.4.3 Fortinet Fortimanager 6.4.4 Fortinet Fortimanager 6.4.5 Fortinet Fortimanager 6.4.6 Fortinet Fortimanager 6.4.7 Fortinet Fortimanager 6.4.8 Fortinet Fortimanager 6.4.9 Fortinet Fortimanager 6.4.10 Fortinet Fortimanager 6.4.11 Fortinet Fortimanager 6.4.12 Fortinet Fortimanager 6.4.13 Fortinet Fortimanager 6.4.15 Fortinet Fortimanager 7.0.0 Fortinet Fortimanager 7.0.1 Fortinet Fortimanager 7.0.2 Fortinet Fortimanager 7.0.3 Fortinet Fortimanager 7.0.4 Fortinet Fortimanager 7.0.5 Fortinet Fortimanager 7.0.6 Fortinet Fortimanager 7.0.7 Fortinet Fortimanager 7.0.8 Fortinet Fortimanager 7.0.9 Fortinet Fortimanager 7.0.10 Fortinet Fortimanager 7.0.11 Fortinet Fortimanager 7.0.12 Fortinet Fortimanager 7.0.13 Fortinet Fortimanager 7.2.0 Fortinet Fortimanager 7.2.1 Fortinet Fortimanager 7.2.2 Fortinet Fortimanager 7.2.3 Fortinet Fortimanager 7.2.4 Fortinet Fortimanager 7.2.5 Fortinet Fortianalyzer 7.4.0 Fortinet Fortianalyzer 7.4.1 Fortinet Fortianalyzer 7.4.2 Fortinet Fortianalyzer 6.2.0 Fortinet Fortianalyzer 6.2.1 Fortinet Fortianalyzer 6.2.2 Fortinet Fortianalyzer 6.2.3 Fortinet Fortianalyzer 6.2.4 Fortinet Fortianalyzer 6.2.5 Fortinet Fortianalyzer 6.2.6 Fortinet Fortianalyzer 6.2.7 Fortinet Fortianalyzer 6.2.8 Fortinet Fortianalyzer 6.2.9 Fortinet Fortianalyzer 6.2.10 Fortinet Fortianalyzer 6.2.11 Fortinet Fortianalyzer 6.2.12 Fortinet Fortianalyzer 6.4.0 Fortinet Fortianalyzer 6.4.1 Fortinet Fortianalyzer 6.4.2 Fortinet Fortianalyzer 6.4.3 Fortinet Fortianalyzer 6.4.4 Fortinet Fortianalyzer 6.4.5 Fortinet Fortianalyzer 6.4.6 Fortinet Fortianalyzer 6.4.7 Fortinet Fortianalyzer 6.4.8 Fortinet Fortianalyzer 6.4.9 Fortinet Fortianalyzer 6.4.10 Fortinet Fortianalyzer 6.4.11 Fortinet Fortianalyzer 6.4.12 Fortinet Fortianalyzer 6.4.13 Fortinet Fortianalyzer 7.0.0 Fortinet Fortianalyzer 7.0.1 Fortinet Fortianalyzer 7.0.2 Fortinet Fortianalyzer 7.0.3 Fortinet Fortianalyzer 7.0.4 Fortinet Fortianalyzer 7.0.5 Fortinet Fortianalyzer 7.0.6 Fortinet Fortianalyzer 7.0.7 Fortinet Fortianalyzer 7.0.8 Fortinet Fortianalyzer 7.0.9 Fortinet Fortianalyzer 7.0.10 Fortinet Fortianalyzer 7.0.11 Fortinet Fortianalyzer 7.2.0 Fortinet Fortianalyzer 7.2.1 Fortinet Fortianalyzer 7.2.2 Fortinet Fortianalyzer 7.2.3 Fortinet Fortianalyzer 7.2.4 Fortinet Fortianalyzer 7.2.5 Fortinet Fortianalyzer BIG Data 7.4.0 Fortinet Fortianalyzer BIG Data 7.2.0 Fortinet Fortianalyzer BIG Data 7.2.5	104

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-098