Recently modified vulnerabilities for "fortinet fortianalyzer cloud" 6.4.1

Where

AND

Sort:

Fortinet FortiAnalyzerMultiple privilege escalation

Risk 69

Severity

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.2, FortiAnalyzer Cloud 7.2.1 through 7.2.6, FortiAnalyzer Cloud 7.0 all versions, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalate privilege via specific shell commands

1 / 2

Source: MITRE

First published (updated )

CVE-2024-45331

Fortinet FortiAnalyzerBuffer Overflow

Risk 86

Severity

9.8

Buffer Overflow

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.0 through 6.4.14, FortiAnalyzer Cloud 7.4.1 through 7.4.3, FortiAnalyzer Cloud 7.2.1 through 7.2.5, FortiAnalyzer Cloud 7.0.1 through 7.0.11, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0.1 through 7.0.11, FortiManager Cloud 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.

First published (updated )

CVE-2024-35276

Fortinet FortiAnalyzerMultiple privilege escalation

Risk 69

Severity

7.8

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalation of privilege via specific shell commands

1 / 2

Source: MITRE

First published (updated )

CVE-2024-33503

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Risk 66

Severity

7.2

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C

A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.10, FortiAnalyzer Cloud 7.0.1 through 7.0.14, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.0 through 7.2.10, FortiManager 7.0.0 through 7.0.14, FortiManager 6.4 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14, FortiManager Cloud 6.4 all versions may allow a remote authenticated read-only admin with CLI access to escalate their privilege via use of a hidden command.

1 / 2

Source: MITRE

Remedy

Upgrade to FortiAnalyzer version 7.6.4 or above Upgrade to FortiAnalyzer version 7.4.8 or above Upgrade to FortiAnalyzer version 7.2.11 or above Upgrade to FortiAnalyzer version 7.0.15 or above Upgrade to FortiAnalyzer Cloud version 7.6.4 or above Upgrade to FortiAnalyzer Cloud version 7.4.8 or above Upgrade to FortiAnalyzer Cloud version 7.2.11 or above Upgrade to FortiAnalyzer Cloud version 7.0.15 or above Upgrade to FortiManager version 7.6.4 or above Upgrade to FortiManager version 7.4.8 or above Upgrade to FortiManager version 7.2.11 or above Upgrade to FortiManager version 7.0.15 or above Upgrade to FortiManager Cloud version 7.6.4 or above Upgrade to FortiManager Cloud version 7.4.8 or above Upgrade to FortiManager Cloud version 7.2.11 or above Upgrade to FortiManager Cloud version 7.0.15 or above

First published (updated )

CVE-2025-48418

Fortinet FortiOSHeap Overflow in fgfmsd

Risk 66

Severity

7.2

Buffer Overflow

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS, FortiManager, FortiAnalyzer, FortiManager Cloud, FortiAnalyzer Cloud, FortiProxy fgfmd daemon may allow an authenticated attacker to execute arbitrary code or commands via specifically crafted requests.

1 / 2

Source: FortiGuard

Remedy

Upgrade to FortiManager version 7.6.2 or above Upgrade to FortiManager version 7.4.6 or above Upgrade to FortiManager version 7.2.10 or above Upgrade to FortiManager version 7.0.14 or above Upgrade to FortiProxy version 7.6.2 or above Upgrade to FortiProxy version 7.4.8 or above Upgrade to FortiProxy version 7.2.13 or above Upgrade to FortiProxy version 7.0.20 or above Upgrade to FortiOS version 7.6.3 or above Upgrade to FortiOS version 7.4.7 or above Upgrade to FortiOS version 7.2.11 or above Upgrade to FortiOS version 7.0.17 or above Upgrade to FortiOS version 6.4.16 or above Upgrade to FortiManager Cloud version 7.6.3 or above Upgrade to FortiManager Cloud version 7.4.6 or above Upgrade to FortiManager Cloud version 7.2.10 or above Upgrade to FortiManager Cloud version 7.0.14 or above Upgrade to FortiAnalyzer version 7.6.3 or above Upgrade to FortiAnalyzer version 7.4.6 or above Upgrade to FortiAnalyzer version 7.2.10 or above Upgrade to FortiAnalyzer version 7.0.14 or above Upgrade to FortiAnalyzer Cloud version 7.6.2 or above Upgrade to FortiAnalyzer Cloud version 7.4.6 or above Upgrade to FortiAnalyzer Cloud version 7.2.10 or above Upgrade to FortiAnalyzer Cloud version 7.0.14 or above

First published (updated )

CVE-2024-50571

Trending

Fortinet FortiAnalyzerMultiple privilege escalation

Fortinet FortiAnalyzerBuffer Overflow

Fortinet FortiAnalyzerMultiple privilege escalation

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Remedy

Fortinet FortiOSHeap Overflow in fgfmsd

Remedy

Company

Resources

Contact