Firetruck

CVE-2024-21762

KEV · Ransomware
Updated Oct 22, 2026 · PUBLISHED
View KEV entry →

Description

Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
fortiosfortinet / fortios>= 6.0.0, < 6.2.16affected
fortiosfortinet / fortios>= 6.4.0, < 6.4.15affected
fortiosfortinet / fortios>= 7.0.0, < 7.0.14affected
fortiosfortinet / fortios>= 7.2.0, < 7.2.7affected
fortiosfortinet / fortios>= 7.4.0, < 7.4.3affected
FortiOSFortinet / FortiOS>= 6.0.0, <= 6.0.18affected
FortiOSFortinet / FortiOS>= 6.2.0, <= 6.2.15affected
FortiOSFortinet / FortiOS>= 6.4.0, <= 6.4.14affected
FortiOSFortinet / FortiOS>= 7.0.0, <= 7.0.13affected
FortiOSFortinet / FortiOS>= 7.2.0, <= 7.2.6affected
FortiOSFortinet / FortiOS>= 7.4.0, <= 7.4.2affected
fortiproxyfortinet / fortiproxy>= 1.0.0, < 2.0.14affected
fortiproxyfortinet / fortiproxy>= 7.0.0, < 7.0.15affected
fortiproxyfortinet / fortiproxy>= 7.2.0, < 7.2.9affected
fortiproxyfortinet / fortiproxy>= 7.4.0, < 7.4.3affected
FortiProxyFortinet / FortiProxy>= 01.00.00, <= 01.00.07affected
FortiProxyFortinet / FortiProxy>= 01.01.00, <= 01.01.03affected
FortiProxyFortinet / FortiProxy01.02.00affected
FortiProxyFortinet / FortiProxy>= 1.1.4, <= 1.1.6affected
FortiProxyFortinet / FortiProxy>= 1.2.1, <= 1.2.13affected
FortiProxyFortinet / FortiProxy>= 2.0.0, <= 2.0.13affected
FortiProxyFortinet / FortiProxy>= 7.0.0, <= 7.0.14affected
FortiProxyFortinet / FortiProxy>= 7.2.0, <= 7.2.8affected
FortiProxyFortinet / FortiProxy>= 7.4.0, <= 7.4.2affected