2024-06-11 16:03:15 +00:00
{
"id" : "CVE-2024-26010" ,
"sourceIdentifier" : "psirt@fortinet.com" ,
"published" : "2024-06-11T15:16:04.473" ,
2024-12-11 21:03:52 +00:00
"lastModified" : "2024-12-11T19:54:35.323" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-06-11 16:03:15 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets."
2024-06-13 20:03:12 +00:00
} ,
{
"lang" : "es" ,
"value" : "Un desbordamiento de b\u00fafer basado en pila en Fortinet FortiPAM versi\u00f3n 1.2.0, 1.1.0 a 1.1.2, 1.0.0 a 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager versi\u00f3n 7.2.0 a 7.2.3, 7.0.1 a 7.0. 3, FortiOS versi\u00f3n 7.4.0 a 7.4.3, 7.2.0 a 7.2.7, 7.0.0 a 7.0.14, 6.4.0 a 6.4.15, 6.2.0 a 6.2.16, 6.0.0 a 6.0. 18, FortiProxy versi\u00f3n 7.4.0 a 7.4.2, 7.2.0 a 7.2.9, 7.0.0 a 7.0.15, 2.0.0 a 2.0.13, 1.2.0 a 1.2.13, 1.1.0 a 1.1. 6, 1.0.0 a 1.0.7 permite a un atacante ejecutar c\u00f3digo o comandos no autorizados a trav\u00e9s de paquetes especialmente manipulados."
2024-06-11 16:03:15 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "psirt@fortinet.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
2024-06-11 16:03:15 +00:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2024-06-11 16:03:15 +00:00
} ,
"exploitabilityScore" : 1.6 ,
"impactScore" : 5.9
2024-12-11 21:03:52 +00:00
} ,
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 1.6 ,
"impactScore" : 5.9
2024-06-11 16:03:15 +00:00
}
]
} ,
"weaknesses" : [
{
"source" : "psirt@fortinet.com" ,
2024-12-08 03:06:42 +00:00
"type" : "Secondary" ,
2024-06-11 16:03:15 +00:00
"description" : [
{
"lang" : "en" ,
"value" : "CWE-121"
}
]
2024-12-11 21:03:52 +00:00
} ,
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-787"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.0.0" ,
"versionEndExcluding" : "7.0.15" ,
"matchCriteriaId" : "4A93633F-8865-49D7-A5CE-F7D009DFB901"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "7.2.0" ,
"versionEndExcluding" : "7.2.8" ,
"matchCriteriaId" : "A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "7.4.0" ,
"versionEndExcluding" : "7.4.4" ,
"matchCriteriaId" : "1FDDB5F3-D229-4208-9110-8860A03C8B59"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndIncluding" : "1.3.0" ,
"matchCriteriaId" : "62F2452A-7AF9-4BD2-932D-D6414699C793"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "1.0.0" ,
"versionEndExcluding" : "7.0.17" ,
"matchCriteriaId" : "E7E7DA8E-34CB-4527-A4A0-1EDBFBBDA894"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "7.2.0" ,
"versionEndExcluding" : "7.2.10" ,
"matchCriteriaId" : "EDFFA2C3-0A23-4884-B751-785BE598DFF3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "7.4.0" ,
"versionEndExcluding" : "7.4.4" ,
"matchCriteriaId" : "3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "7.0.1" ,
"versionEndExcluding" : "7.0.4" ,
"matchCriteriaId" : "EFB333FC-4406-4EBD-B6F2-6C41BCE2E742"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "7.2.0" ,
"versionEndExcluding" : "7.2.4" ,
"matchCriteriaId" : "EB0D2553-E4E6-454A-80F6-9D014A4710D3"
}
]
}
]
2024-06-11 16:03:15 +00:00
}
] ,
"references" : [
{
"url" : "https://fortiguard.fortinet.com/psirt/FG-IR-24-036" ,
2024-12-11 21:03:52 +00:00
"source" : "psirt@fortinet.com" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://fortiguard.fortinet.com/psirt/FG-IR-24-036" ,
2024-12-11 21:03:52 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2024-06-11 16:03:15 +00:00
}
]
}
