CVE-2024-23108

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 9.7EPSS 80%

Published 2024-02-05Updated 2024-08-01

Media 19971

Vulnerability details

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:X/RC:X

CNAfortinet

EPSS score history

Sources

4 links

PoC links are not available for guest users. Login to view them.

CVEShield Bleeping Computer Bleeping Computer CVE Organization

Profile

CVSS

9.7

EPSS

80%

Published

2024-02-05

Updated

2024-08-01

CNA

fortinet

Vendors

Fortinet

1 product

CPEs

cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated