Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2
7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 and 6.0.0 through 6.0.12 and 5.6.0 through 5.6.11 and 5.4.0 through 5.4.7 and 5.2.0 through 5.2.10 and 5.0.0 through 5.0.12 and 4.3.4 through 4.3.8 allows attacker to execute unauthorized code or commands via crafted CLI requests.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://fortiguard.com/psirt/FG-IR-24-124 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
24 Jul 2025, 19:05
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet fortimanager
Fortinet fortianalyzer Big Data Fortinet Fortinet fortianalyzer |
|
| References | () https://fortiguard.com/psirt/FG-IR-24-124 - Vendor Advisory | |
| CPE | cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:* |
11 Mar 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-11 15:15
Updated : 2025-07-24 19:05
NVD link : CVE-2024-32123
Mitre link : CVE-2024-32123
JSON object : View
Products Affected
fortinet
- fortianalyzer
- fortianalyzer_big_data
- fortimanager
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')