Vulnerabilities > CVE-2024-33505 - Out-of-bounds Write vulnerability in Fortinet Fortianalyzer, Fortimanager and Fortimanager Cloud

CVSS 7.3 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

LOW

network

low complexity

fortinet

CWE-787

NVD

Published: 2024-11-12

Updated: 2025-01-31

Summary

A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege via specially crafted http requests

Vulnerable Configurations

Part	Description	Count
Application	Fortinet Fortinet Fortimanager 7.4.0 Fortinet Fortimanager 7.4.1 Fortinet Fortimanager 7.4.2 Fortinet Fortimanager 6.0.0 Fortinet Fortimanager 6.0.1 Fortinet Fortimanager 6.0.2 Fortinet Fortimanager 6.0.3 Fortinet Fortimanager 6.0.4 Fortinet Fortimanager 6.0.5 Fortinet Fortimanager 6.0.6 Fortinet Fortimanager 6.0.7 Fortinet Fortimanager 6.0.8 Fortinet Fortimanager 6.0.9 Fortinet Fortimanager 6.0.10 Fortinet Fortimanager 6.0.11 Fortinet Fortimanager 6.2.0 Fortinet Fortimanager 6.2.1 Fortinet Fortimanager 6.2.2 Fortinet Fortimanager 6.2.3 Fortinet Fortimanager 6.2.4 Fortinet Fortimanager 6.2.5 Fortinet Fortimanager 6.2.6 Fortinet Fortimanager 6.2.7 Fortinet Fortimanager 6.2.8 Fortinet Fortimanager 6.2.9 Fortinet Fortimanager 6.2.10 Fortinet Fortimanager 6.2.11 Fortinet Fortimanager 6.2.12 Fortinet Fortimanager 6.2.13 Fortinet Fortimanager 6.4.0 Fortinet Fortimanager 6.4.1 Fortinet Fortimanager 6.4.2 Fortinet Fortimanager 6.4.3 Fortinet Fortimanager 6.4.4 Fortinet Fortimanager 6.4.5 Fortinet Fortimanager 6.4.6 Fortinet Fortimanager 6.4.7 Fortinet Fortimanager 6.4.8 Fortinet Fortimanager 6.4.9 Fortinet Fortimanager 6.4.10 Fortinet Fortimanager 6.4.11 Fortinet Fortimanager 6.4.12 Fortinet Fortimanager 6.4.13 Fortinet Fortimanager 6.4.15 Fortinet Fortimanager 7.0.0 Fortinet Fortimanager 7.0.1 Fortinet Fortimanager 7.0.2 Fortinet Fortimanager 7.0.3 Fortinet Fortimanager 7.0.4 Fortinet Fortimanager 7.0.5 Fortinet Fortimanager 7.0.6 Fortinet Fortimanager 7.0.7 Fortinet Fortimanager 7.0.8 Fortinet Fortimanager 7.0.9 Fortinet Fortimanager 7.0.10 Fortinet Fortimanager 7.0.11 Fortinet Fortimanager 7.0.12 Fortinet Fortimanager 7.0.13 Fortinet Fortimanager 7.2.0 Fortinet Fortimanager 7.2.1 Fortinet Fortimanager 7.2.2 Fortinet Fortimanager 7.2.3 Fortinet Fortimanager 7.2.4 Fortinet Fortimanager 7.2.5 Fortinet Fortimanager 7.2.6 Fortinet Fortianalyzer 7.4.0 Fortinet Fortianalyzer 7.4.1 Fortinet Fortianalyzer 7.4.2 Fortinet Fortianalyzer 7.4.3 Fortinet Fortianalyzer 6.4.0 Fortinet Fortianalyzer 6.4.1 Fortinet Fortianalyzer 6.4.2 Fortinet Fortianalyzer 6.4.3 Fortinet Fortianalyzer 6.4.4 Fortinet Fortianalyzer 6.4.5 Fortinet Fortianalyzer 6.4.6 Fortinet Fortianalyzer 6.4.7 Fortinet Fortianalyzer 6.4.8 Fortinet Fortianalyzer 6.4.9 Fortinet Fortianalyzer 6.4.10 Fortinet Fortianalyzer 6.4.11 Fortinet Fortianalyzer 6.4.12 Fortinet Fortianalyzer 6.4.13 Fortinet Fortianalyzer 6.4.14 Fortinet Fortianalyzer 6.4.15 Fortinet Fortianalyzer 7.0.0 Fortinet Fortianalyzer 7.0.1 Fortinet Fortianalyzer 7.0.2 Fortinet Fortianalyzer 7.0.3 Fortinet Fortianalyzer 7.0.4 Fortinet Fortianalyzer 7.0.5 Fortinet Fortianalyzer 7.0.6 Fortinet Fortianalyzer 7.0.7 Fortinet Fortianalyzer 7.0.8 Fortinet Fortianalyzer 7.0.9 Fortinet Fortianalyzer 7.0.10 Fortinet Fortianalyzer 7.0.11 Fortinet Fortianalyzer 7.0.12 Fortinet Fortianalyzer 7.0.13 Fortinet Fortianalyzer 7.2.0 Fortinet Fortianalyzer 7.2.1 Fortinet Fortianalyzer 7.2.2 Fortinet Fortianalyzer 7.2.3 Fortinet Fortianalyzer 7.2.4 Fortinet Fortianalyzer 7.2.5 Fortinet Fortimanager Cloud 7.4.1 Fortinet Fortimanager Cloud 7.4.2 Fortinet Fortimanager Cloud 6.4.1 Fortinet Fortimanager Cloud 6.4.2 Fortinet Fortimanager Cloud 6.4.3 Fortinet Fortimanager Cloud 6.4.4 Fortinet Fortimanager Cloud 6.4.5 Fortinet Fortimanager Cloud 6.4.6 Fortinet Fortimanager Cloud 6.4.7 Fortinet Fortimanager Cloud 7.0.1 Fortinet Fortimanager Cloud 7.0.2 Fortinet Fortimanager Cloud 7.0.3 Fortinet Fortimanager Cloud 7.0.4 Fortinet Fortimanager Cloud 7.0.5 Fortinet Fortimanager Cloud 7.0.6 Fortinet Fortimanager Cloud 7.0.7 Fortinet Fortimanager Cloud 7.0.8 Fortinet Fortimanager Cloud 7.0.9 Fortinet Fortimanager Cloud 7.0.10 Fortinet Fortimanager Cloud 7.0.11 Fortinet Fortimanager Cloud 7.0.12 Fortinet Fortimanager Cloud 7.0.13 Fortinet Fortimanager Cloud 7.2.1 Fortinet Fortimanager Cloud 7.2.2 Fortinet Fortimanager Cloud 7.2.3 Fortinet Fortimanager Cloud 7.2.4 Fortinet Fortimanager Cloud 7.2.5 Fortinet Fortimanager Cloud 7.2.6	134

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-125