← Back to CVE List
CVE-2024-47575NVD
Vulnerability Summary
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
CVSS v3.1 Base Metrics — Score 9.8 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Fortinet Fortimanager >= 6.2.0 and < 6.2.13
- Fortinet Fortimanager >= 6.4.0 and < 6.4.15
- Fortinet Fortimanager >= 7.0.0 and < 7.0.13
- Fortinet Fortimanager >= 7.2.0 and < 7.2.8
- Fortinet Fortimanager >= 7.4.0 and < 7.4.5
- Fortinet Fortimanager
- Fortinet Fortimanager Cloud >= 6.4.1 and <= 6.4.7
- Fortinet Fortimanager Cloud >= 7.0.1 and < 7.0.13
- Fortinet Fortimanager Cloud >= 7.2.1 and < 7.2.8
- Fortinet Fortimanager Cloud >= 7.4.1 and < 7.4.5
- Fortinet Fortimanager 6.2.13
- Fortinet Fortimanager 6.4.15
- Fortinet Fortimanager 7.0.13
- Fortinet Fortimanager 7.2.8
- Fortinet Fortimanager 7.4.5
- Fortinet Fortimanager Cloud 7.0.13
- Fortinet Fortimanager Cloud 7.2.8
- Fortinet Fortimanager Cloud 7.4.5