CVE-2024-50569: OS Command Injection
Published Feb 11, 2025
·Updated
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input.
Affected Software
3 affected components
Fortinet FortiWeb>=7.0.0<=7.6.0
Fortinet FortiWeb>=7.0.0<7.4.6
Fortinet FortiWeb=7.6.0
Remediation
Information
Please upgrade to FortiWeb version 7.6.1 or above
Please upgrade to FortiWeb version 7.4.6 or above
Event History
Feb 11, 2025
CVE Published
via MITRE·04:09 PM
Data Sourced
via MITRE·04:09 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-50569?
CVE-2024-50569 is rated as critical due to its potential for unauthorized code execution.
2
How do I fix CVE-2024-50569?
To fix CVE-2024-50569, upgrade Fortinet FortiWeb to version 7.6.1 or later.
3
What are the affected versions in CVE-2024-50569?
CVE-2024-50569 affects Fortinet FortiWeb versions 7.0.0 through 7.6.0.
4
What types of attacks can CVE-2024-50569 exploit?
CVE-2024-50569 can be exploited for OS command injection, allowing attackers to execute unauthorized commands.
5
Is there any workaround for CVE-2024-50569?
There are no recommended workarounds for CVE-2024-50569; updating the software is the only secure solution.