CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write
Attackers can execute unauthorized code or commands on Fortinet FortiOS and FortiProxy devices via crafted requests due to an out-of-bounds write vulnerability.
- Exploited in the wild
- Since 9 Feb 2024
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-21762?
CVE-2024-21762 is a critical memory corruption vulnerability in Fortinet Fortios, published on 9 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests
Weakness: CWE-787
Which versions are affected by CVE-2024-21762?
It affects 2 products.
Products include Fortinet Fortios, Fortinet Fortiproxy.
How do I fix CVE-2024-21762?
No fix has been published for CVE-2024-21762 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 16 Feb 2024.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-21762 being exploited?
Yes. Attackers have exploited CVE-2024-21762 in the wild since at least 9 Feb 2024, including in ransomware campaigns.
Public exploit code: 14 proofs of concept on GitHub.
Other vulnerabilities in Fortinet Fortios
- CVE-2024-23113 Fortinet Multiple Products Format String
- CVE-2022-40684 Fortinet Multiple Products Authentication Bypass
- CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass
- CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow
- CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow
Sources
Also known as GHSA-v4hq-m4wr-6pmj.