CVE-2024-35273

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
8.8HIGH
EPSS
0.2%
top 57.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Fortinet FortianalyzerFortinet Fortianalyzer CloudFortinet Fortimanager+1 more
Timeline
PublishedJan 14

Description

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages6 packages

▶NVDfortinet/fortimanager7.4.0 — 7.4.3
▶NVDfortinet/fortianalyzer7.4.0 — 7.4.4
▶NVDfortinet/fortimanager_cloud7.4.1 — 7.4.3
▶NVDfortinet/fortianalyzer_cloud7.4.1 — 7.4.3
▶CVEListV5fortinet/fortimanager7.4.0 — 7.4.2

🔴Vulnerability Details

2
GHSA
GHSA-gc47-55jm-w6mg: A out-of-bounds write in Fortinet FortiManager version 7↗2025-01-14
▶
CVEList
CVE-2024-35273: A out-of-bounds write in Fortinet FortiManager version 7↗2025-01-14
▶

📋Vendor Advisories

1
Fortinet
Out-of-bounds Write in sndproxy↗2025-01-14
▶
CVE-2024-35273 (HIGH CVSS 8.8) | A out-of-bounds write in Fortinet F | cvebase.io