CyberSec.Space Logo
CVEブラウザに戻る

CVE-2024-47575

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-10-23
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.

Affected Platforms (CPE)

📦
Fortinet

Fortimanager

>= 6.2.0 and < 6.2.13>= 6.4.0 and < 6.4.15>= 7.0.0 and < 7.0.13>= 7.2.0 and < 7.2.8>= 7.4.0 and < 7.4.5= 7.6.0
📦
Fortinet

Fortimanager Cloud

>= 6.4.1 and <= 6.4.7>= 7.0.1 and < 7.0.13>= 7.2.1 and < 7.2.8>= 7.4.1 and < 7.4.5

References & Advisories

🔗 https://fortiguard.fortinet.com/psirt/FG-IR-24-423
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-47575

関連する脆弱性情報

CVE-2025-686487.2

A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro...

CVE-2026-248589.8

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 ...

CVE-2024-405936.0

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnaly...

CVE-2024-505717.2

A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, Forti...