CVE Watch—

CVE-2024-23113

Fortinet Multiple Products Format String Vulnerability

CVSS

—

Sem CVSS

EPSS

61.7%

p99

KEV

SIM

9 de out. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

61.7%EPSS · 30 dias61.7%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Fortinet / Multiple Products

Vulnerabilidade

Fortinet Multiple Products Format String Vulnerability

Adicionado ao KEV

9 de out. de 2024

Corrigir até

30 de out. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.fortiguard.com/psirt/FG-IR-24-029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-23113

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-616246.0 MÉD

71.5%

KEV—71Fortinet Multiple Products Path Traversal Vulnerability20d CVE-2025-252498.1 ALT

89.9%

KEV—77Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability29d CVE-2022-406849.8 CRÍ

100.0%

KEV—80Fortinet Multiple Products Authentication Bypass Vulnerability92d CVE-2026-24858—

99.7%

KEV—80Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2025-59718—

99.3%

KEV—80Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability—CVE-2025-32756—

98.3%

KEV—79Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability—