← CVE Intelligence

CVE-2024-26015

Fortinet / FortiProxy PUBLISHED

Description (CNA)

An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiProxyaffected 7.4.0 through 7.4.3; affected 7.2.0 through 7.2.10; affected 7.0.0 through 7.0.18
Fortinet / FortiOSaffected 7.4.0 through 7.4.3; affected 7.2.0 through 7.2.8; affected 7.0.0 through 7.0.15

CWE

CWE-1389

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.