Fortinet FortiPAM/FortiProxy/FortiSRA/FortiWeb/FortiOS HTTP Command format string

Summaryinfo

A vulnerability was found in Fortinet FortiPAM, FortiProxy, FortiSRA, FortiWeb and FortiOS. It has been declared as critical. Affected is an unknown function of the component HTTP Command Handler. The manipulation results in format string. This vulnerability was named CVE-2024-45324. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Fortinet FortiPAM, FortiProxy, FortiSRA, FortiWeb and FortiOS. Affected is some unknown processing of the component HTTP Command Handler. The manipulation with an unknown input leads to a format string vulnerability. CWE is classifying the issue as CWE-134. The product uses a function that accepts a format string as an argument, but the format string originates from an external source. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0 through 1.4.2 and before 1.3.1, FortiSRA version 1.4.0 through 1.4.2 and before 1.3.1 and FortiWeb version 7.4.0 through 7.4.5, version 7.2.0 through 7.2.10 and before 7.0.10 allows a privileged attacker to execute unauthorized code or commands via specially crafted HTTP or HTTPS commands.

The advisory is available at fortiguard.fortinet.com. This vulnerability is traded as CVE-2024-45324 since 08/27/2024. The exploitability is told to be easy. It is possible to launch the attack remotely. Additional levels of successful authentication are necessary for exploitation. The technical details are unknown and an exploit is not available.

The vulnerability scanner Nessus provides a plugin with the ID 232602 (Fortinet FortiWeb Multiple format string vulnerabilities (FG-IR-24-325)), which helps to determine the existence of the flaw in a target environment.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (232602). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Firewall Software

Vendor

• Fortinet

Name

• FortiOS
• FortiPAM
• FortiProxy
• FortiSRA
• FortiWeb

License

• commercial

Website

• Vendor: https://www.fortinet.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion