CVE Watch—

CVE-2024-21762

Fortinet FortiOS Out-of-Bound Write Vulnerability

CVSS

—

No CVSS

EPSS

83.4%

p100

KEV

YES

Feb 9, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

80.8%EPSS · 30 days83.4%

2026-06-302026-07-16

KEV catalog record

Product

Fortinet / FortiOS

Vulnerability

Fortinet FortiOS Out-of-Bound Write Vulnerability

Added to KEV

Feb 9, 2024

Remediate by

Feb 16, 2024

Known ransomware use

Yes

Summary description

Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://fortiguard.fortinet.com/psirt/FG-IR-24-015 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21762

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-13379—

100.0%

KEV—80Fortinet FortiOS SSL VPN Path Traversal Vulnerability—CVE-2022-42475—

99.9%

KEV—80Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability—CVE-2020-12812—

98.8%

KEV—80Fortinet FortiOS SSL VPN Improper Authentication Vulnerability—CVE-2019-5591—

96.9%

KEV—79Fortinet FortiOS Default Configuration Vulnerability—CVE-2022-41328—

95.7%

KEV—79Fortinet FortiOS Path Traversal Vulnerability—CVE-2019-6693—

92.1%

KEV—78Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability—