FortiManager Unauthenticated Remote Code Execution
A missing authentication vulnerability in Fortinet FortiManager allows a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests to the fgfmd daemon. This vulnerability affects FortiManager versions 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.12, and all versions of 6.0. References: https://nvd.nist.gov/vuln/detail/CVE-2024-47575 https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575 https://fortiguard.fortinet.com/psirt/FG-IR-24-423 Remediation: Update FortiManager to version 7.6.1 or later, 7.4.5 or later, 7.2.8 or later, 7.0.13 or later, or 6.4.15 or later.
Used 18 times · 9 assets checked · domain, subdomain, ipv4