Recherche : [FortiManager]

CVE-2024-47575 https://attackerkb.com/topics/OFBGprmpIE/cve-2024-47575/rapid7-analysis

13/11/2024 22:00:46

On October 23, 2024, Fortinet published an advisory for CVE-2024-47575, a missing authentication vulnerability affecting FortiManager and FortiManager Cloud de…

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks https://www.rapid7.com/blog/post/2024/10/23/etr-fortinet-fortimanager-cve-2024-47575-exploited-in-zero-day-attacks/

23/10/2024 18:45:31

On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function [CWE-306] in the FortiManager fgfmd daemon that allows a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. The vulnerability carries a CVSS v3 score of 9.8.

Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs https://doublepulsar.com/burning-zero-days-fortijump-fortimanager-vulnerability-used-by-nation-state-in-espionage-via-msps-c79abec59773

23/10/2024 09:53:22

Did you know there’s widespread exploitation of FortiNet products going on using a zero day, and that there’s no CVE? Now you do.

Fortinet releases patches for undisclosed critical FortiManager vulnerability - Help Net Security https://www.helpnetsecurity.com/2024/10/21/fortimanager-critical-vulnerability/

22/10/2024 15:45:17

Fortinet has released critical security updates for FortiManager, to fix a critical vulnerability that is reportedly being exploited.

Liens par page

Filtres