CVE-2024-50571

EPSS 0.5%
Veröffentlicht 14.10.2025 15:23:00
Zuletzt bearbeitet 27.01.2026 20:16:13
Erkennungen
Login

A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions, FortiAnalyzer 6.0 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.5, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiAnalyzer Cloud 7.0.1 through 7.0.13, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.9, FortiManager 7.0.0 through 7.0.13, FortiManager 6.4 all versions, FortiManager 6.2 all versions, FortiManager 6.0 all versions, FortiManager Cloud 7.6.2, FortiManager Cloud 7.4.1 through 7.4.5, FortiManager Cloud 7.2.1 through 7.2.9, FortiManager Cloud 7.0.1 through 7.0.13, FortiManager Cloud 6.4 all versions, FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiProxy 7.6.0 through 7.6.1, FortiProxy 7.4.0 through 7.4.7, FortiProxy 7.2.0 through 7.2.12, FortiProxy 7.0.0 through 7.0.19, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 24 VulnDex Vulnerability Enrichment 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fortinet ≫ Fortianalyzer Version >= 7.0.0 < 7.0.14

Fortinet ≫ Fortianalyzer Version >= 7.2.0 < 7.2.10

Fortinet ≫ Fortianalyzer Version >= 7.4.0 < 7.4.6

Fortinet ≫ Fortianalyzer Version >= 7.6.0 < 7.6.3

Fortinet ≫ Fortianalyzer Cloud Version >= 6.4.1 < 7.0.14

Fortinet ≫ Fortianalyzer Cloud Version >= 7.2.1 < 7.2.10

Fortinet ≫ Fortianalyzer Cloud Version >= 7.4.1 < 7.4.6

Fortinet ≫ Fortimanager Version >= 6.0.0 < 7.0.14

Fortinet ≫ Fortimanager Version >= 7.2.0 < 7.2.10

Fortinet ≫ Fortimanager Version >= 7.4.0 < 7.4.6

Fortinet ≫ Fortimanager Version >= 7.6.0 < 7.6.2

Fortinet ≫ Fortimanager Cloud Version >= 6.4.1 < 7.0.14

Fortinet ≫ Fortimanager Cloud Version >= 7.2.1 < 7.2.10

Fortinet ≫ Fortimanager Cloud Version >= 7.4.1 < 7.4.6

Fortinet ≫ Fortimanager Cloud Version 7.6.2

Fortinet ≫ FortiOS Version >= 6.2.0 < 6.4.16

Fortinet ≫ FortiOS Version >= 7.0.0 < 7.0.17

Fortinet ≫ FortiOS Version >= 7.2.0 < 7.2.11

Fortinet ≫ FortiOS Version >= 7.4.0 < 7.4.7

Fortinet ≫ FortiOS Version >= 7.6.0 < 7.6.3

Fortinet ≫ FortiProxy Version >= 1.0.0 < 7.0.20

Fortinet ≫ FortiProxy Version >= 7.2.0 < 7.2.13

Fortinet ≫ FortiProxy Version >= 7.4.0 < 7.4.8

Fortinet ≫ FortiProxy Version 7.6.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.5%	0.393

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Fortinet	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

https://fortiguard.fortinet.com/psirt/FG-IR-24-442

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-50571

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-50571

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-50571

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-50571