VULNERABILITY INTELLIGENCE
CVE-2024-23110
CVSS score7.8 HIGH
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands
Weakness classification
- psirt@fortinet.com: CWE-121
- nvd@nist.gov: CWE-787
Primary references
- psirt@fortinet.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory