Fortinet FortiOS up to 7.2.10/7.4.4 IPsec IKE Service integer overflow

Summaryinfo

A vulnerability marked as problematic has been reported in Fortinet FortiOS up to 7.2.10/7.4.4. This issue affects some unknown processing of the component IPsec IKE Service. Performing a manipulation results in integer overflow. This vulnerability was named CVE-2024-46669. The attack needs to be approached within the local network. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Fortinet FortiOS up to 7.2.10/7.4.4. This affects an unknown code of the component IPsec IKE Service. The manipulation with an unknown input leads to a integer overflow vulnerability. CWE is classifying the issue as CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. This is going to have an impact on availability. The summary by CVE is:

An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service.

It is possible to read the advisory at fortiguard.fortinet.com. This vulnerability is uniquely identified as CVE-2024-46669 since 09/11/2024. The exploitability is told to be easy. The attack needs to be initiated within the local network. The technical details are unknown and an exploit is not publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 214083 (Fortinet Fortigate Integer Overflow in ipsec ike (FG-IR-24-267)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (214083). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• Fortinet

Name

• FortiOS

Version

• 7.2.0
• 7.2.1
• 7.2.2
• 7.2.3
• 7.2.4
• 7.2.5
• 7.2.6
• 7.2.7
• 7.2.8
• 7.2.9
• 7.2.10
• 7.4.0
• 7.4.1
• 7.4.2
• 7.4.3
• 7.4.4

License

• commercial

Website

• Vendor: https://www.fortinet.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion