CVE-2024-48886: Critical severity fortios vulnerability

Q: What is the severity of CVE-2024-48886?

CVE-2024-48886 is rated as a critical vulnerability due to weak authentication in multiple Fortinet products.

Q: How do I fix CVE-2024-48886?

To fix CVE-2024-48886, upgrade Fortinet FortiOS, FortiProxy, or FortiManager to the latest patched versions.

Q: Which versions are affected by CVE-2024-48886?

CVE-2024-48886 affects Fortinet FortiOS versions 7.4.0 through 7.4.4, among others, as well as FortiProxy and FortiManager in specified versions.

Q: What products are impacted by CVE-2024-48886?

The impacted products include Fortinet FortiOS, FortiProxy, FortiManager, FortiManager Cloud, and FortiAnalyzer Cloud.

Q: Is user intervention required to mitigate CVE-2024-48886?

Yes, user intervention is required to mitigate CVE-2024-48886 by applying the recommended software updates.

Published Jan 14, 2025

Updated

A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.

Affected Software

18 affected components

Fortinet FortiOS>=7.4.0<=7.4.4, >=7.2.0<=7.2.8, >=7.0.0<=7.0.15, >=6.4.0<=6.4.15

Fortinet FortiProxy>=7.4.0<=7.4.4, >=7.2.0<=7.2.10, >=7.0.0<=7.0.17, >=2.0.0<=2.0.14

Fortinet FortiManager>=7.6.0<=7.6.1, >=7.4.1<=7.4.3

Fortinet FortiManager Cloud>=7.4.1<=7.4.3

Fortinet FortiAnalyzer Cloud>=7.4.1<=7.4.3

Fortinet FortiAnalyzer>=7.4.1<7.4.4

Fortinet FortiAnalyzer>=7.6.0<7.6.2

Fortinet FortiAnalyzer Cloud>=7.4.1<7.4.4

Fortinet FortiManager>=7.4.1<7.4.4

Fortinet FortiManager>=7.6.0<7.6.2

Fortinet FortiManager Cloud>=7.4.1<7.4.4

Fortinet FortiProxy>=2.0.0<2.0.15

Fortinet FortiProxy>=7.0.0<7.0.18

Fortinet FortiProxy>=7.2.0<7.2.11

Fortinet FortiProxy>=7.4.0<7.4.5

Fortinet FortiOS>=6.4.0<7.0.16

Fortinet FortiOS>=7.2.0<7.2.9

Fortinet FortiOS>=7.4.0<7.4.5

Remediation

Information

Please upgrade to FortiManager Cloud version 7.6.2 or above Please upgrade to FortiManager Cloud version 7.4.4 or above Please upgrade to FortiOS version 7.6.0 or above Please upgrade to FortiOS version 7.4.5 or above Please upgrade to FortiOS version 7.2.9 or above Please upgrade to FortiOS version 7.0.16 or above Please upgrade to FortiAnalyzer version 7.6.2 or above Please upgrade to FortiAnalyzer version 7.4.4 or above Please upgrade to FortiAnalyzer Cloud version 7.6.2 or above Please upgrade to FortiAnalyzer Cloud version 7.4.4 or above Please upgrade to FortiManager version 7.6.2 or above Please upgrade to FortiManager version 7.4.4 or above Please upgrade to FortiAuthenticator version 7.0.0 or above Please upgrade to FortiProxy version 7.4.5 or above Please upgrade to FortiProxy version 7.2.11 or above Please upgrade to FortiProxy version 7.0.18 or above Please upgrade to FortiProxy version 2.0.15 or above

Event History

Jan 14, 2025

CVE Published

via MITRE·02:09 PM

Data Sourced

via MITRE·02:09 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Aug 10, 57065

Event

via NVD·09:56 AM

Frequently Asked Questions

What is the severity of CVE-2024-48886?

CVE-2024-48886 is rated as a critical vulnerability due to weak authentication in multiple Fortinet products.

How do I fix CVE-2024-48886?

To fix CVE-2024-48886, upgrade Fortinet FortiOS, FortiProxy, or FortiManager to the latest patched versions.

Which versions are affected by CVE-2024-48886?