CVE Watch—

CVE-2024-23113

Fortinet Multiple Products Format String Vulnerability

CVSS

—

Sin CVSS

EPSS

61.7%

p99

KEV

SÍ

9 oct 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

61.7%EPSS · 30 días61.7%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Fortinet / Multiple Products

Vulnerabilidad

Fortinet Multiple Products Format String Vulnerability

Añadido a KEV

9 oct 2024

Remediar antes de

30 oct 2024

Uso conocido en ransomware

Descripción resumida

Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.fortiguard.com/psirt/FG-IR-24-029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-23113

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2022-406849.8 CRÍ

100.0%

KEV—80Fortinet Multiple Products Authentication Bypass Vulnerability25d CVE-2026-24858—

99.7%

KEV—80Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2025-59718—

99.3%

KEV—80Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability—CVE-2025-32756—

98.1%

KEV—79Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability—