Firetruck

CVE-2024-23113

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
fortiosfortinet / fortios>= 7.0.0, <= 7.0.13affected
fortiosfortinet / fortios>= 7.0.0, <= 7.0.13affected
fortiosfortinet / fortios>= 7.0.0, <= 7.0.13affected
fortiosfortinet / fortios>= 7.2.0, <= 7.2.6affected
fortiosfortinet / fortios>= 7.2.0, <= 7.2.6affected
fortiosfortinet / fortios>= 7.2.0, <= 7.2.6affected
fortiosfortinet / fortios>= 7.4.0, <= 7.4.2affected
fortiosfortinet / fortios>= 7.4.0, <= 7.4.2affected
fortiosfortinet / fortios>= 7.4.0, <= 7.4.2affected
FortiOSFortinet / FortiOS>= 7.0.0, <= 7.0.13affected
FortiOSFortinet / FortiOS>= 7.2.0, <= 7.2.6affected
FortiOSFortinet / FortiOS>= 7.4.0, <= 7.4.2affected
fortipamfortinet / fortipam>= 1.0.0, <= 1.0.3affected
fortipamfortinet / fortipam>= 1.0.0, <= 1.0.3affected
fortipamfortinet / fortipam>= 1.0.0, <= 1.0.3affected
fortipamfortinet / fortipam>= 1.1.0, <= 1.1.2affected
fortipamfortinet / fortipam>= 1.1.0, <= 1.1.2affected
fortipamfortinet / fortipam>= 1.1.0, <= 1.1.2affected
fortipamfortinet / fortipam1.2.0affected
fortipamfortinet / fortipam1.2.0affected
fortipamfortinet / fortipam1.2.0affected
FortiPAMFortinet / FortiPAM>= 1.0.0, <= 1.0.3affected
FortiPAMFortinet / FortiPAM>= 1.1.0, <= 1.1.2affected
FortiPAMFortinet / FortiPAM1.2.0affected
fortiproxyfortinet / fortiproxy>= 7.0.0, <= 7.0.15affected
fortiproxyfortinet / fortiproxy>= 7.0.0, <= 7.0.15affected
fortiproxyfortinet / fortiproxy>= 7.0.0, <= 7.0.15affected
fortiproxyfortinet / fortiproxy>= 7.2.0, <= 7.2.8affected
fortiproxyfortinet / fortiproxy>= 7.2.0, <= 7.2.8affected
fortiproxyfortinet / fortiproxy>= 7.2.0, <= 7.2.8affected
fortiproxyfortinet / fortiproxy>= 7.4.0, <= 7.4.2affected
fortiproxyfortinet / fortiproxy>= 7.4.0, <= 7.4.2affected
fortiproxyfortinet / fortiproxy>= 7.4.0, <= 7.4.2affected
FortiProxyFortinet / FortiProxy>= 7.0.0, <= 7.0.15affected
FortiProxyFortinet / FortiProxy>= 7.2.0, <= 7.2.8affected
FortiProxyFortinet / FortiProxy>= 7.4.0, <= 7.4.2affected
fortiswitchmanagerfortinet / fortiswitchmanager>= 7.0.0, <= 7.0.3affected
fortiswitchmanagerfortinet / fortiswitchmanager>= 7.0.0, <= 7.0.3affected
fortiswitchmanagerfortinet / fortiswitchmanager>= 7.2.0, <= 7.2.3affected
fortiswitchmanagerfortinet / fortiswitchmanager>= 7.2.0, <= 7.2.3affected
FortiSwitchManagerFortinet / FortiSwitchManager>= 7.0.0, <= 7.0.3affected
FortiSwitchManagerFortinet / FortiSwitchManager>= 7.2.0, <= 7.2.3affected