Fortinet Multiple Products Format String Vulnerability
Fortinet · Multiple Products
Date added (CISA)
2024-10-09
Remediation due
2024-10-30
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.