CVE-2024-26007
published 2024-05-14CVE-2024-26007: An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.15%
63.2th percentile
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortinet | — | — |
| fortinet | fortios | — | — |
| fortinet | fortios | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-54q9-gw6j-4h5c: An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7
ghsa_unreviewed·2024-05-14
CVE-2024-26007 [MEDIUM] CWE-703 GHSA-54q9-gw6j-4h5c: An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.
Fortinet
Node.js crash over administrative interface
vendor_fortinet·2024-05-14·CVSS 5.3
CVE-2024-26007 [MEDIUM] CWE-703 Node.js crash over administrative interface
FG-IR-24-017: Node.js crash over administrative interface
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.
CVEs: CVE-2024-26007
CWEs: CWE-703
CVSS: 5.3 (medium)
Affected products: FortiOS, Fortinet
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-05-14
Published