CVEs / CVE-2024-21762
CVE-2024-21762: Fortinet FortiOS Out-of-Bound Write Vulnerability
- Known exploited in the CISA KEV catalog since 9 Feb 2024
- critical 9.8 CVSS 3.1 (NVD)
- EPSS 84.5% chance of exploitation in the next 30 days, higher than 99% of CVEs (30 Oct 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2024-21762
Summary
Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.
Description
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| Fortinet FortiOS | from 7.4.0, up to and including 7.4.2 | — |
| Fortinet FortiOS | from 7.2.0, up to and including 7.2.6 | — |
| Fortinet FortiOS | from 7.0.0, up to and including 7.0.13 | — |
| Fortinet FortiOS | from 6.4.0, up to and including 6.4.14 | — |
| Fortinet FortiOS | from 6.2.0, up to and including 6.2.15 | — |
| Fortinet FortiOS | from 6.0.0, up to and including 6.0.18 | — |
| Fortinet FortiProxy | from 7.4.0, up to and including 7.4.2 | — |
| Fortinet FortiProxy | from 7.2.0, up to and including 7.2.8 | — |
| Fortinet FortiProxy | from 7.0.0, up to and including 7.0.14 | — |
| Fortinet FortiProxy | from 2.0.0, up to and including 2.0.13 | — |
| Fortinet FortiProxy | from 1.2.1, up to and including 1.2.13 | — |
| Fortinet FortiProxy | 01.02.00 | — |
| Fortinet FortiProxy | from 1.1.4, up to and including 1.1.6 | — |
| Fortinet FortiProxy | from 01.01.00, up to and including 01.01.03 | — |
| Fortinet FortiProxy | from 01.00.00, up to and including 01.00.07 | — |
| fortinet fortiproxy | from 1.0.0, before 2.0.14 | 2.0.14 |
| fortinet fortiproxy | from 7.0.0, before 7.0.15 | 7.0.15 |
| fortinet fortiproxy | from 7.2.0, before 7.2.9 | 7.2.9 |
| fortinet fortiproxy | from 7.4.0, before 7.4.3 | 7.4.3 |
| fortinet fortios | from 6.0.0, before 6.2.16 | 6.2.16 |
| fortinet fortios | from 6.4.0, before 6.4.15 | 6.4.15 |
| fortinet fortios | from 7.0.0, before 7.0.14 | 7.0.14 |
| fortinet fortios | from 7.2.0, before 7.2.7 | 7.2.7 |
| fortinet fortios | from 7.4.0, before 7.4.3 | 7.4.3 |
Exploitation
| In CISA KEV since | 9 Feb 2024 |
|---|---|
| Due date for US federal agencies | 16 Feb 2024 |
| Used in ransomware campaigns | Known |
| Required action | Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. |
Severity
| CVSS 3.1 | 9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HScored by NVD |
|---|---|
| Weakness | CWE-787 |
References
- CVE-2024-21762 on NVD
- CVE-2024-21762 in the CISA KEV catalog
- https://fortiguard.fortinet.com/psirt/FG-IR-24-015 (cited by CISA)
- https://fortiguard.com/psirt/FG-IR-24-015 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21762 US Government Resource
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.