CVE-2024-32122
published 2025-04-08CVE-2024-32122: A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all…
PriorityP419medium4.4CVSS 3.1
AVLACLPRHUINSUCHINAN
EPSS
0.21%
10.8th percentile
A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortinet | — | — |
| fortinet | fortios | — | — |
| fortinet | fortios | 6.4.0 – 6.4.16 | — |
| fortinet | fortios | 7.0.0 – 7.0.17 | — |
| fortinet | fortios | 7.2.0 – 7.2.11 | — |
| fortinet | fortios | 7.4.0 – 7.4.7 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens RUGGEDCOM APE1808 Devices
cisa_ics·2025-05-15·CVSS 2.3
[LOW] Siemens RUGGEDCOM APE1808 Devices
ICS Advisory
##
Siemens RUGGEDCOM APE1808 Devices
Release DateMay 15, 2025
Alert CodeICSA-25-135-01
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 6.3
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM APE1808 Devices
- Vulnerabilities: Insufficiently Protected Credentials, Out-of-bounds Write
## 2. RISK EVALUATION
S
Fortinet
LDAP Clear-text credentials retrievable with IP modification
vendor_fortinet·2025-04-08·CVSS 2.3
CVE-2024-32122 [LOW] CWE-257 LDAP Clear-text credentials retrievable with IP modification
FG-IR-24-111: LDAP Clear-text credentials retrievable with IP modification
A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.
CVEs: CVE-2024-32122
CWEs: CWE-257
CVSS: 2.3 (low)
Affected products: FortiOS, Fortinet
GHSA
GHSA-79gc-w327-w4f2: A storing passwords in a recoverable format in Fortinet FortiOS versions 7
ghsa_unreviewed·2025-04-08
CVE-2024-32122 [LOW] CWE-257 GHSA-79gc-w327-w4f2: A storing passwords in a recoverable format in Fortinet FortiOS versions 7
A storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1 allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-04-08
Published