Fortinet FortiOS: Out-of-bounds Write (CVE-2024-26010)

Fortinet FortiOS: Out-of-bounds Write (CVE-2024-26010)

Severity

8

CVSS

(AV:N/AC:H/Au:N/C:C/I:C/A:C)

Published

06/11/2024

Created

12/14/2024

Added

12/13/2024

Modified

01/28/2025

Description

A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.

Solution(s)

• fortios-upgrade-7_0_15
• fortios-upgrade-7_2_8
• fortios-upgrade-7_4_4

References

• https://attackerkb.com/topics/cve-2024-26010
• CVE - 2024-26010
• https://fortiguard.fortinet.com/psirt/FG-IR-24-036