← CVE Intelligence

CVE-2024-35276

Fortinet / FortiAnalyzer PUBLISHED

Description (CNA)

A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.0 through 6.4.14, FortiAnalyzer Cloud 7.4.1 through 7.4.3, FortiAnalyzer Cloud 7.2.1 through 7.2.5, FortiAnalyzer Cloud 7.0.1 through 7.0.11, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0.1 through 7.0.11, FortiManager Cloud 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiAnalyzeraffected 7.4.0 through 7.4.3; affected 7.2.0 through 7.2.5; affected 7.0.0 through 7.0.12; affected 6.4.0 through 6.4.14
Fortinet / FortiManager Cloudaffected 7.4.1 through 7.4.3; affected 7.2.1 through 7.2.5; affected 7.0.1 through 7.0.11; affected 6.4.1 through 6.4.7
Fortinet / FortiAnalyzer Cloudaffected 7.4.1 through 7.4.3; affected 7.2.1 through 7.2.5; affected 7.0.1 through 7.0.11; affected 6.4.1 through 6.4.7
Fortinet / FortiManageraffected 7.4.0 through 7.4.3; affected 7.2.0 through 7.2.5; affected 7.0.0 through 7.0.12; affected 6.4.0 through 6.4.14

CWE

CWE-121

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.