8.8
CVE-2024-35273
- EPSS 0.08%
- Veröffentlicht 14.01.2025 14:15:29
- Zuletzt bearbeitet 31.01.2025 17:38:10
- Quelle psirt@fortinet.com
- Teams Watchlist Login
- Unerledigt Login
A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fortinet ≫ Fortianalyzer Version >= 7.4.0 < 7.4.4
Fortinet ≫ Fortianalyzer Cloud Version >= 7.4.1 < 7.4.3
Fortinet ≫ Fortimanager Version >= 7.4.0 < 7.4.3
Fortinet ≫ Fortimanager Cloud Version >= 7.4.1 < 7.4.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.238 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| psirt@fortinet.com | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.