CVE-2024-48884 - Vulnerability Details

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder

Published: 2025-01-14

Score: 6.7 Medium

EPSS: 15.2% Moderate

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Fortinet

FortiOS

unaffected

Version	Status	Constraints
`7.6.0`	affected	—
`7.4.0`	affected	≤ 7.4.4
`7.2.0`	affected	≤ 7.2.9
`7.0.0`	affected	≤ 7.0.15
`6.4.0`	affected	≤ 6.4.15

Fortinet

FortiProxy

unaffected

Version	Status	Constraints
`7.4.0`	affected	≤ 7.4.5
`7.2.0`	affected	≤ 7.2.11
`7.0.0`	affected	≤ 7.0.18
`2.0.0`	affected	≤ 2.0.14
`1.2.1`	affected	≤ 1.2.13
`01.02.00`	affected	—
`1.1.4`	affected	≤ 1.1.6
`01.01.00`	affected	≤ 01.01.03
`01.00.00`	affected	≤ 01.00.07

Fortinet

FortiManager

unaffected

Version	Status	Constraints
`7.6.0`	affected	≤ 7.6.1
`7.4.1`	affected	≤ 7.4.3

Fortinet

FortiManager Cloud

unaffected

Version	Status	Constraints
`7.4.1`	affected	≤ 7.4.3

Configuration 1 [-]

OR	cpe:2.3:a:fortinet:fortimanager::::::::
	cpe:2.3:a:fortinet:fortimanager::::::::
	cpe:2.3:a:fortinet:fortimanager_cloud::::::::
	cpe:2.3:a:fortinet:fortiproxy::::::::
	cpe:2.3:a:fortinet:fortiproxy::::::::
	cpe:2.3:a:fortinet:fortiproxy::::::::
	cpe:2.3:a:fortinet:fortirecorder::::::::
	cpe:2.3:a:fortinet:fortirecorder::::::::
	cpe:2.3:a:fortinet:fortivoice::::::::
	cpe:2.3:a:fortinet:fortivoice::::::::
	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:a:fortinet:fortiweb:7.6.0:::::::*
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios:7.6.0:::::::*

No data.

No data available yet.

Remediation

Vendor Solution

Upgrade to FortiProxy version 7.4.6 or above Upgrade to FortiProxy version 7.2.12 or above Upgrade to FortiProxy version 7.0.19 or above Upgrade to FortiOS version 7.6.1 or above Upgrade to FortiOS version 7.4.5 or above Upgrade to FortiOS version 7.2.10 or above Upgrade to FortiOS version 7.0.16 or above Upgrade to FortiOS version 6.4.16 or above Upgrade to FortiManager version 7.6.2 or above Upgrade to FortiManager version 7.4.4 or above Upgrade to FortiManager Cloud version 7.4.4 or above

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2024-43232	A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.5 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager Cloud versions 7.4.1 through 7.4.3 may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.15212.

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://fortiguard.fortinet.com/psirt/FG-IR-24-259

History

Thu, 22 Oct 2026 14:00:00 +0000

Type	Values Removed	Values Added
Description	A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder	A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder
CPEs	cpe:2.3:a:fortinet:fortiproxy:1.0.0:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.1:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.2:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.3:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.4:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.5:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.6:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.7:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.0:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.1:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.2:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.3:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.0:::::::*	cpe:2.3:a:fortinet:fortiproxy:01.00.00:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.01:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.02:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.03:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.04:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.05:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.06:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.07:::::::* cpe:2.3:a:fortinet:fortiproxy:01.01.00:::::::* cpe:2.3:a:fortinet:fortiproxy:01.01.01:::::::* cpe:2.3:a:fortinet:fortiproxy:01.01.02:::::::* cpe:2.3:a:fortinet:fortiproxy:01.01.03:::::::* cpe:2.3:a:fortinet:fortiproxy:01.02.00:::::::*
Metrics	cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C'}`	cvssV3_1 `{'score': 6.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C'}`

Wed, 08 Jul 2026 13:30:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C'}`	cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C'}`

Wed, 14 Jan 2026 13:00:00 +0000

Type	Values Removed	Values Added
Description	A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.5 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager Cloud versions 7.4.1 through 7.4.3 may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder	A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder
First Time appeared		Fortinet fortimanagercloud
CPEs		cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:::::::* cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:::::::* cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.0:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.1:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.2:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.3:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.4:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.5:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.6:::::::* cpe:2.3:a:fortinet:fortiproxy:1.0.7:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.0:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.1:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.2:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.3:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.4:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.5:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.6:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.0:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.10:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.11:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.12:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.13:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.1:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.2:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.3:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.4:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.5:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.6:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.7:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.8:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.9:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.0:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.10:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.11:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.12:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.13:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.14:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.1:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.2:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.3:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.4:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.5:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.6:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.7:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.8:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.9:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.10:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.11:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.12:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.13:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.14:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.15:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.16:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.17:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.18:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.1:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.2:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.3:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.4:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.5:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.6:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.7:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.8:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.9:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.10:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.11:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.1:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.2:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.3:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.4:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.5:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.6:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.7:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.8:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.9:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.1:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.2:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.3:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.4:::::::* cpe:2.3:a:fortinet:fortiproxy:7.4.5:::::::*
Vendors & Products		Fortinet fortimanagercloud

Thu, 07 Aug 2025 14:30:00 +0000

Type	Values Removed	Values Added
Description	A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.5 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to trigger an escalation of privilege via specially crafted packets.	A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.5 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager Cloud versions 7.4.1 through 7.4.3 may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder

Mon, 03 Feb 2025 22:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Fortinet fortimanager Cloud Fortinet fortiproxy Fortinet fortirecorder Fortinet fortivoice Fortinet fortiweb
CPEs		cpe:2.3:a:fortinet:fortimanager:::::::: cpe:2.3:a:fortinet:fortimanager_cloud:::::::: cpe:2.3:a:fortinet:fortiproxy:::::::: cpe:2.3:a:fortinet:fortirecorder:::::::: cpe:2.3:a:fortinet:fortivoice:::::::: cpe:2.3:a:fortinet:fortiweb:::::::: cpe:2.3:a:fortinet:fortiweb:7.6.0:::::::* cpe:2.3:o:fortinet:fortios::::::::
Vendors & Products		Fortinet fortimanager Cloud Fortinet fortiproxy Fortinet fortirecorder Fortinet fortivoice Fortinet fortiweb

Thu, 16 Jan 2025 16:30:00 +0000

Type	Values Removed	Values Added
Description	A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.5 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager Cloud versions 7.4.1 through 7.4.3, FortiRecorder versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4, FortiVoice versions 7.0.0 through 7.0.4, 6.4.0 through 6.4.9, 6.0.0 through 6.0.12, FortiWeb 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.10, 6.4.0 through 6.4.3 allows attacker to trigger an escalation of privilege via specially crafted packets.	A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.5 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to trigger an escalation of privilege via specially crafted packets.

Tue, 14 Jan 2025 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 14 Jan 2025 14:15:00 +0000

Type	Values Removed	Values Added
Description		A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.5 through 7.2.9, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, 7.2.0 through 7.2.11, 7.0.0 through 7.0.18, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager Cloud versions 7.4.1 through 7.4.3, FortiRecorder versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4, FortiVoice versions 7.0.0 through 7.0.4, 6.4.0 through 6.4.9, 6.0.0 through 6.0.12, FortiWeb 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.10, 6.4.0 through 6.4.3 allows attacker to trigger an escalation of privilege via specially crafted packets.
First Time appeared		Fortinet Fortinet fortimanager Fortinet fortios
Weaknesses		CWE-22
CPEs		cpe:2.3:o:fortinet:fortimanager:7.4.1:::::::* cpe:2.3:o:fortinet:fortimanager:7.4.2:::::::* cpe:2.3:o:fortinet:fortimanager:7.4.3:::::::* cpe:2.3:o:fortinet:fortimanager:7.6.0:::::::* cpe:2.3:o:fortinet:fortimanager:7.6.1:::::::* cpe:2.3:o:fortinet:fortios:6.4.0:::::::* cpe:2.3:o:fortinet:fortios:6.4.10:::::::* cpe:2.3:o:fortinet:fortios:6.4.11:::::::* cpe:2.3:o:fortinet:fortios:6.4.12:::::::* cpe:2.3:o:fortinet:fortios:6.4.13:::::::* cpe:2.3:o:fortinet:fortios:6.4.14:::::::* cpe:2.3:o:fortinet:fortios:6.4.15:::::::* cpe:2.3:o:fortinet:fortios:6.4.1:::::::* cpe:2.3:o:fortinet:fortios:6.4.2:::::::* cpe:2.3:o:fortinet:fortios:6.4.3:::::::* cpe:2.3:o:fortinet:fortios:6.4.4:::::::* cpe:2.3:o:fortinet:fortios:6.4.5:::::::* cpe:2.3:o:fortinet:fortios:6.4.6:::::::* cpe:2.3:o:fortinet:fortios:6.4.7:::::::* cpe:2.3:o:fortinet:fortios:6.4.8:::::::* cpe:2.3:o:fortinet:fortios:6.4.9:::::::* cpe:2.3:o:fortinet:fortios:7.0.0:::::::* cpe:2.3:o:fortinet:fortios:7.0.10:::::::* cpe:2.3:o:fortinet:fortios:7.0.11:::::::* cpe:2.3:o:fortinet:fortios:7.0.12:::::::* cpe:2.3:o:fortinet:fortios:7.0.13:::::::* cpe:2.3:o:fortinet:fortios:7.0.14:::::::* cpe:2.3:o:fortinet:fortios:7.0.15:::::::* cpe:2.3:o:fortinet:fortios:7.0.1:::::::* cpe:2.3:o:fortinet:fortios:7.0.2:::::::* cpe:2.3:o:fortinet:fortios:7.0.3:::::::* cpe:2.3:o:fortinet:fortios:7.0.4:::::::* cpe:2.3:o:fortinet:fortios:7.0.5:::::::* cpe:2.3:o:fortinet:fortios:7.0.6:::::::* cpe:2.3:o:fortinet:fortios:7.0.7:::::::* cpe:2.3:o:fortinet:fortios:7.0.8:::::::* cpe:2.3:o:fortinet:fortios:7.0.9:::::::* cpe:2.3:o:fortinet:fortios:7.2.0:::::::* cpe:2.3:o:fortinet:fortios:7.2.1:::::::* cpe:2.3:o:fortinet:fortios:7.2.2:::::::* cpe:2.3:o:fortinet:fortios:7.2.3:::::::* cpe:2.3:o:fortinet:fortios:7.2.4:::::::* cpe:2.3:o:fortinet:fortios:7.2.5:::::::* cpe:2.3:o:fortinet:fortios:7.2.6:::::::* cpe:2.3:o:fortinet:fortios:7.2.7:::::::* cpe:2.3:o:fortinet:fortios:7.2.8:::::::* cpe:2.3:o:fortinet:fortios:7.2.9:::::::* cpe:2.3:o:fortinet:fortios:7.4.0:::::::* cpe:2.3:o:fortinet:fortios:7.4.1:::::::* cpe:2.3:o:fortinet:fortios:7.4.2:::::::* cpe:2.3:o:fortinet:fortios:7.4.3:::::::* cpe:2.3:o:fortinet:fortios:7.4.4:::::::* cpe:2.3:o:fortinet:fortios:7.6.0:::::::*
Vendors & Products		Fortinet Fortinet fortimanager Fortinet fortios
References		https://fortiguard.fortinet.com/psirt/FG-IR-24-259
Metrics		cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C'}`

Subscriptions

Fortinet Fortimanager Fortimanager Cloud Fortimanagercloud Fortios Fortiproxy Fortirecorder Fortivoice Fortiweb

MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2025-01-14T14:09:26.476Z

Updated: 2026-10-22T13:48:36.687Z

Reserved: 2024-10-09T09:03:09.960Z

Link: CVE-2024-48884

Vulnrichment

Updated: 2025-01-14T15:18:00.337Z

NVD

Status : Modified

Published: 2025-01-14T14:15:32.873

Modified: 2026-10-22T14:17:35.977

Link: CVE-2024-48884

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-22

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object