CVE-2024-52963

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
5.9MEDIUM
EPSS
0.1%
top 69.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Fortinet FortiosFortinet FortipamFortinet Fortiproxy
Timeline
PublishedJan 14

Description

A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.2 | Impact: 1.4

Affected Packages4 packages

▶NVDfortinet/fortios6.4.0 — 7.2.11+2
▶CVEListV5fortinet/fortios7.4.0 — 7.4.6+4
▶CVEListV5fortinet/fortipam1.4.0 — 1.4.2+4
▶CVEListV5fortinet/fortiproxy7.4.0 — 7.4.5+3

🔴Vulnerability Details

2
GHSA
GHSA-2rg6-2x33-4cjj: A out-of-bounds write in Fortinet FortiOS versions 7↗2025-01-14
▶
CVEList
CVE-2024-52963: A out-of-bounds write in Fortinet FortiOS versions 7↗2025-01-14
▶

📋Vendor Advisories

1
Fortinet
Out-of-bounds Write in IPSEC Daemon↗2025-01-14
▶
CVE-2024-52963 (MEDIUM CVSS 5.9) | A out-of-bounds write in Fortinet F | cvebase.io