CVE-2024-50571
published 2025-10-14CVE-2024-50571: A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9…
PriorityP347high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
0.54%
44.4th percentile
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions, FortiAnalyzer 6.0 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.5, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiAnalyzer Cloud 7.0.1 through 7.0.13, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.9, FortiManager 7.0.0 through 7.0.13, FortiManager 6.4 all versions, FortiManager 6.2 all versions, FortiManager 6.0 all versions, FortiManager Cloud 7.6.2, FortiManager Cloud 7.4.1 through 7.4.5, FortiManager Cloud 7.2.1 through 7.2.9, FortiManager Cloud 7.0.1 through 7.0.13, FortiManager Cloud 6.4 all versions, FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiProxy 7.6.0 through 7.6.1, FortiProxy 7.4.0 through 7.4.7, FortiProxy 7.2.0 through 7.2.12, FortiProxy 7.0.0 through 7.0.19, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests.
Affected
69 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortianalyzer | — | — |
| fortinet | fortianalyzer | 6.0.0 – 6.0.12 | — |
| fortinet | fortianalyzer | 6.2.0 – 6.2.13 | — |
| fortinet | fortianalyzer | 6.4.0 – 6.4.15 | — |
| fortinet | fortianalyzer | >= 7.0.0 < 7.0.14 | 7.0.14 |
| fortinet | fortianalyzer | 7.0.0 – 7.0.13 | — |
| fortinet | fortianalyzer | >= 7.2.0 < 7.2.10 | 7.2.10 |
| fortinet | fortianalyzer | 7.2.0 – 7.2.9 | — |
| fortinet | fortianalyzer | >= 7.4.0 < 7.4.6 | 7.4.6 |
| fortinet | fortianalyzer | 7.4.0 – 7.4.5 | — |
| fortinet | fortianalyzer | >= 7.6.0 < 7.6.3 | 7.6.3 |
| fortinet | fortianalyzer | 7.6.0 – 7.6.2 | — |
| fortinet | fortianalyzer_cloud | >= 6.4.1 < 7.0.14 | 7.0.14 |
| fortinet | fortianalyzer_cloud | 6.4.1 – 6.4.7 | — |
| fortinet | fortianalyzer_cloud | 7.0.1 – 7.0.13 | — |
| fortinet | fortianalyzer_cloud | >= 7.2.1 < 7.2.10 | 7.2.10 |
| fortinet | fortianalyzer_cloud | 7.2.1 – 7.2.9 | — |
| fortinet | fortianalyzer_cloud | >= 7.4.1 < 7.4.6 | 7.4.6 |
| fortinet | fortianalyzer_cloud | 7.4.1 – 7.4.5 | — |
| fortinet | fortianalyzercloud | — | — |
| fortinet | fortimanager | — | — |
| fortinet | fortimanager | >= 6.0.0 < 7.0.14 | 7.0.14 |
| fortinet | fortimanager | 6.0.0 – 6.0.12 | — |
| fortinet | fortimanager | 6.2.0 – 6.2.13 | — |
| fortinet | fortimanager | 6.4.0 – 6.4.15 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Fortinet
Heap Overflow in fgfmsd
vendor_fortinet·2025-10-14·CVSS 7.2
CVE-2024-50571 [HIGH] CWE-122 Heap Overflow in fgfmsd
FG-IR-24-442: Heap Overflow in fgfmsd
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions, FortiAnalyzer 6.0 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.5, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiAnalyzer Cloud 7.0.1 through 7.0.13, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.9, FortiManager 7.0.0 through 7.0.13, FortiManager 6.4 all versions, FortiManager 6.2 all versions, FortiManager 6.0 all versions, FortiManager Cloud 7.6.2, FortiManager Cloud 7.4.1 through 7.4.5, FortiManage
GHSA
GHSA-4gx4-5v9p-8rrm: A heap-based buffer overflow in Fortinet FortiOS 7
ghsa_unreviewed·2025-10-14
CVE-2024-50571 [HIGH] CWE-122 GHSA-4gx4-5v9p-8rrm: A heap-based buffer overflow in Fortinet FortiOS 7
A heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15, 6.2.0 through 6.2.17, FortiManager Cloud 7.6.2, 7.4.1 through 7.4.5, 7.2.1 through 7.2.8, 7.0.1 through 7.0.13, 6.4.1 through 6.4.7, FortiAnalyzer Cloud 7.4.1 through 7.4.5, 7.2.1 through 7.2.8, 7.0.1 through 7.0.13, 6.4.1 through 6.4.7, FortiProxy 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.12, 7.0.0 through 7.0.19, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiAnalyzer 7.6.0 through 7.6.2, 7.4.0 through 7.4.5, 7.2.0 through 7.2.8, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, 6.2.0 through 6.2.13, 6.0.0 through 6.0.12, FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.
GHSA
SAK-50571 Sakai Kernel users created with type roleview can login as a normal user
ghsa·2024-10-15
CVE-2024-47876 [HIGH] CWE-285 SAK-50571 Sakai Kernel users created with type roleview can login as a normal user
SAK-50571 Sakai Kernel users created with type roleview can login as a normal user
### Impact
Illegal access can be granted to the system.
### References
see https://sakaiproject.atlassian.net/browse/SAK-50571
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-14
Published