Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-32119 (GCVE-0-2024-32119)
Vulnerability from cvelistv5 – Published: 2025-06-10 16:36 – Updated: 2025-06-10 19:39
VLAI?
EPSS
Summary
An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.
Severity ?
CWE
- CWE-1390 - Execute unauthorized code or commands
Assigner
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Fortinet | FortiClientEMS |
Affected:
7.4.0
Affected: 7.2.0 , ≤ 7.2.4 (semver) Affected: 7.0.0 , ≤ 7.0.13 (semver) Affected: 6.4.7 , ≤ 6.4.9 (semver) Affected: 6.4.0 , ≤ 6.4.4 (semver) Affected: 6.2.6 , ≤ 6.2.9 (semver) Affected: 6.2.0 , ≤ 6.2.4 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-32119",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-06-10T19:29:57.527258Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-10T19:39:57.140Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [],
"defaultStatus": "unaffected",
"product": "FortiClientEMS",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "7.4.0"
},
{
"lessThanOrEqual": "7.2.4",
"status": "affected",
"version": "7.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.13",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.9",
"status": "affected",
"version": "6.4.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.4",
"status": "affected",
"version": "6.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.2.9",
"status": "affected",
"version": "6.2.6",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.2.4",
"status": "affected",
"version": "6.2.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user\u0027s FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1390",
"description": "Execute unauthorized code or commands",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-06-10T16:36:15.059Z",
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"shortName": "fortinet"
},
"references": [
{
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-23-375",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-23-375"
}
],
"solutions": [
{
"lang": "en",
"value": "Please upgrade to FortiClientEMS version 7.4.1 or above \nPlease upgrade to FortiClientEMS version 7.2.5 or above"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"assignerShortName": "fortinet",
"cveId": "CVE-2024-32119",
"datePublished": "2025-06-10T16:36:15.059Z",
"dateReserved": "2024-04-11T12:09:46.571Z",
"dateUpdated": "2025-06-10T19:39:57.140Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2024-32119\",\"sourceIdentifier\":\"psirt@fortinet.com\",\"published\":\"2025-06-10T17:19:14.323\",\"lastModified\":\"2025-07-16T15:20:12.983\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user\u0027s FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de autenticaci\u00f3n incorrecta [CWE-287] en Fortinet FortiClientEMS versi\u00f3n 7.4.0 y anteriores a 7.2.4 permite que un atacante no autenticado con conocimiento del FCTUID y VDOM del usuario objetivo realice operaciones como cargar o etiquetar en nombre del usuario objetivo a trav\u00e9s de solicitudes TCP especialmente manipuladas.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L\",\"baseScore\":4.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.2,\"impactScore\":2.5}]},\"weaknesses\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1390\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.0\",\"versionEndIncluding\":\"6.2.9\",\"matchCriteriaId\":\"46359866-6D0D-4479-A1E6-96EB1753DF6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.4.0\",\"versionEndIncluding\":\"6.4.9\",\"matchCriteriaId\":\"F67F4416-C237-41A2-B7A4-2541EE60C972\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndIncluding\":\"7.0.13\",\"matchCriteriaId\":\"91D4223F-37D4-45D7-A767-2AA8EDAC9AEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.0\",\"versionEndExcluding\":\"7.2.5\",\"matchCriteriaId\":\"C9FA0AB2-209D-4C5A-86E8-D5F88816CD60\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22665641-9DD6-42BB-81E2-52E03153E114\"}]}]}],\"references\":[{\"url\":\"https://fortiguard.fortinet.com/psirt/FG-IR-23-375\",\"source\":\"psirt@fortinet.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"cna\": {\"affected\": [{\"vendor\": \"Fortinet\", \"product\": \"FortiClientEMS\", \"cpes\": [], \"defaultStatus\": \"unaffected\", \"versions\": [{\"version\": \"7.4.0\", \"status\": \"affected\"}, {\"versionType\": \"semver\", \"version\": \"7.2.0\", \"lessThanOrEqual\": \"7.2.4\", \"status\": \"affected\"}, {\"versionType\": \"semver\", \"version\": \"7.0.0\", \"lessThanOrEqual\": \"7.0.13\", \"status\": \"affected\"}, {\"versionType\": \"semver\", \"version\": \"6.4.7\", \"lessThanOrEqual\": \"6.4.9\", \"status\": \"affected\"}, {\"versionType\": \"semver\", \"version\": \"6.4.0\", \"lessThanOrEqual\": \"6.4.4\", \"status\": \"affected\"}, {\"versionType\": \"semver\", \"version\": \"6.2.6\", \"lessThanOrEqual\": \"6.2.9\", \"status\": \"affected\"}, {\"versionType\": \"semver\", \"version\": \"6.2.0\", \"lessThanOrEqual\": \"6.2.4\", \"status\": \"affected\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user\u0027s FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.\"}], \"providerMetadata\": {\"orgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"shortName\": \"fortinet\", \"dateUpdated\": \"2025-06-10T16:36:15.059Z\"}, \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"cweId\": \"CWE-1390\", \"description\": \"Execute unauthorized code or commands\", \"type\": \"CWE\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"attackComplexity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"LOW\", \"baseScore\": 4.6, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:U/RC:C\"}}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Please upgrade to FortiClientEMS version 7.4.1 or above \\nPlease upgrade to FortiClientEMS version 7.2.5 or above\"}], \"references\": [{\"name\": \"https://fortiguard.fortinet.com/psirt/FG-IR-23-375\", \"url\": \"https://fortiguard.fortinet.com/psirt/FG-IR-23-375\"}]}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-32119\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-06-10T19:29:57.527258Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-10T19:29:59.031Z\"}}]}",
"cveMetadata": "{\"cveId\": \"CVE-2024-32119\", \"assignerOrgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"fortinet\", \"dateReserved\": \"2024-04-11T12:09:46.571Z\", \"datePublished\": \"2025-06-10T16:36:15.059Z\", \"dateUpdated\": \"2025-06-10T19:39:57.140Z\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
GSD-2024-32119
Vulnerability from gsd - Updated: 2024-04-12 05:02Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
{
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2024-32119"
],
"id": "GSD-2024-32119",
"modified": "2024-04-12T05:02:22.151656Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2024-32119",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
CERTFR-2025-AVI-0496
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Fortinet | FortiProxy | FortiProxy versions 7.4.x antérieures à 7.4.9 | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 7.2.x | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 1.1.x | ||
| Fortinet | FortiPortal | FortiPortal versions 7.0.x antérieures à 7.0.9 | ||
| Fortinet | FortiPAM | FortiPAM versions 1.4.x antérieures à 1.4.2 | ||
| Fortinet | FortiADC | FortiADC toutes versions 7.0.x | ||
| Fortinet | FortiClient | FortiClientEMS versions 7.4.x antérieures à 7.4.3 | ||
| Fortinet | FortiOS | FortiOS versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiWeb | FortiWeb versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiClient | FortiClientEMS versions 7.2.x antérieures à 7.2.7 | ||
| Fortinet | FortiOS | FortiOS toutes versions 6.4.x | ||
| Fortinet | FortiClient | FortiClientWindows versions 7.4.x antérieures à 7.4.1 | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 1.2.x | ||
| Fortinet | FortiADC | FortiADC versions 7.2.x antérieures à 7.2.8 | ||
| Fortinet | FortiOS | FortiOS toutes versions 7.0.x | ||
| Fortinet | FortiWeb | FortiWeb versions 7.4.x antérieures à 7.4.7 | ||
| Fortinet | FortiOS | FortiOS toutes versions 6.2.x | ||
| Fortinet | FortiPAM | FortiPAM versions 1.1.x antérieures à 1.1.3 | ||
| Fortinet | FortiPortal | FortiPortal versions 7.4.x antérieures à 7.4.1 | ||
| Fortinet | FortiClient | FortiClientWindows toutes versions 7.0.x | ||
| Fortinet | FortiClient | FortiClientEMS toutes versions 6.4.x | ||
| Fortinet | FortiOS | FortiOS toutes versions 7.2.x | ||
| Fortinet | FortiProxy | FortiProxy versions 7.6.x antérieures à 7.6.3 | ||
| Fortinet | FortiADC | FortiADC versions 7.4.x antérieures à 7.4.7 | ||
| Fortinet | FortiADC | FortiADC toutes versions 6.2.x | ||
| Fortinet | FortiPAM | FortiPAM versions 1.3.x antérieures à 1.3.1 | ||
| Fortinet | FortiADC | FortiADC versions 7.1.x antérieures à 7.1.5 | ||
| Fortinet | FortiSRA | FortiSRA versions 1.4.x antérieures à 1.4.2 | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 2.0.x | ||
| Fortinet | FortiClient | FortiClientWindows versions 7.2.x antérieures à 7.2.7 | ||
| Fortinet | FortiADC | FortiADC toutes versions 6.1.x | ||
| Fortinet | FortiOS | FortiOS versions 7.4.x antérieures à 7.4.8 | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 7.0.x | ||
| Fortinet | FortiADC | FortiADC versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiPAM | FortiPAM versions 1.2.x antérieures à 1.2.1 | ||
| Fortinet | FortiClient | FortiClientEMS toutes versions 6.2.x | ||
| Fortinet | FortiPAM | FortiPAM versions 1.0.x antérieures à 1.0.4 | ||
| Fortinet | FortiPortal | FortiPortal versions 7.2.x antérieures à 7.2.6 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "FortiProxy versions 7.4.x ant\u00e9rieures \u00e0 7.4.9",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 7.2.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 1.1.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPortal versions 7.0.x ant\u00e9rieures \u00e0 7.0.9",
"product": {
"name": "FortiPortal",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.4.x ant\u00e9rieures \u00e0 1.4.2",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC toutes versions 7.0.x",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientEMS versions 7.4.x ant\u00e9rieures \u00e0 7.4.3",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientEMS versions 7.2.x ant\u00e9rieures \u00e0 7.2.7",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS toutes versions 6.4.x",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientWindows versions 7.4.x ant\u00e9rieures \u00e0 7.4.1",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 1.2.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.2.x ant\u00e9rieures \u00e0 7.2.8",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS toutes versions 7.0.x",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.4.x ant\u00e9rieures \u00e0 7.4.7",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS toutes versions 6.2.x",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.1.x ant\u00e9rieures \u00e0 1.1.3",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPortal versions 7.4.x ant\u00e9rieures \u00e0 7.4.1",
"product": {
"name": "FortiPortal",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientWindows toutes versions 7.0.x",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientEMS toutes versions 6.4.x",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS toutes versions 7.2.x",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy versions 7.6.x ant\u00e9rieures \u00e0 7.6.3",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.4.x ant\u00e9rieures \u00e0 7.4.7",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC toutes versions 6.2.x",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.3.x ant\u00e9rieures \u00e0 1.3.1",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.1.x ant\u00e9rieures \u00e0 7.1.5",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSRA versions 1.4.x ant\u00e9rieures \u00e0 1.4.2",
"product": {
"name": "FortiSRA",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 2.0.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientWindows versions 7.2.x ant\u00e9rieures \u00e0 7.2.7",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC toutes versions 6.1.x",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS versions 7.4.x ant\u00e9rieures \u00e0 7.4.8",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 7.0.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.2.x ant\u00e9rieures \u00e0 1.2.1",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientEMS toutes versions 6.2.x",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.0.x ant\u00e9rieures \u00e0 1.0.4",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPortal versions 7.2.x ant\u00e9rieures \u00e0 7.2.6",
"product": {
"name": "FortiPortal",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-32119",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-32119"
},
{
"name": "CVE-2023-48786",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48786"
},
{
"name": "CVE-2024-50562",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50562"
},
{
"name": "CVE-2025-22256",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22256"
},
{
"name": "CVE-2023-29184",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29184"
},
{
"name": "CVE-2024-54019",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54019"
},
{
"name": "CVE-2025-24471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24471"
},
{
"name": "CVE-2025-31104",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31104"
},
{
"name": "CVE-2024-45329",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45329"
},
{
"name": "CVE-2024-50568",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50568"
},
{
"name": "CVE-2025-25250",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25250"
},
{
"name": "CVE-2025-22251",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22251"
},
{
"name": "CVE-2025-22254",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22254"
},
{
"name": "CVE-2025-22862",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22862"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0496",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-06-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Fortinet. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet",
"vendor_advisories": [
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-385",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-385"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-274",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-274"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-257",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-257"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-099",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-099"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-375",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-375"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-058",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-058"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-008",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-008"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-006",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-006"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-287",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-287"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-342",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-342"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-008",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-008"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-544",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-544"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-339",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-339"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-365",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-365"
}
]
}
CERTFR-2025-AVI-0496
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Fortinet | FortiProxy | FortiProxy versions 7.4.x antérieures à 7.4.9 | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 7.2.x | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 1.1.x | ||
| Fortinet | FortiPortal | FortiPortal versions 7.0.x antérieures à 7.0.9 | ||
| Fortinet | FortiPAM | FortiPAM versions 1.4.x antérieures à 1.4.2 | ||
| Fortinet | FortiADC | FortiADC toutes versions 7.0.x | ||
| Fortinet | FortiClient | FortiClientEMS versions 7.4.x antérieures à 7.4.3 | ||
| Fortinet | FortiOS | FortiOS versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiWeb | FortiWeb versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiClient | FortiClientEMS versions 7.2.x antérieures à 7.2.7 | ||
| Fortinet | FortiOS | FortiOS toutes versions 6.4.x | ||
| Fortinet | FortiClient | FortiClientWindows versions 7.4.x antérieures à 7.4.1 | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 1.2.x | ||
| Fortinet | FortiADC | FortiADC versions 7.2.x antérieures à 7.2.8 | ||
| Fortinet | FortiOS | FortiOS toutes versions 7.0.x | ||
| Fortinet | FortiWeb | FortiWeb versions 7.4.x antérieures à 7.4.7 | ||
| Fortinet | FortiOS | FortiOS toutes versions 6.2.x | ||
| Fortinet | FortiPAM | FortiPAM versions 1.1.x antérieures à 1.1.3 | ||
| Fortinet | FortiPortal | FortiPortal versions 7.4.x antérieures à 7.4.1 | ||
| Fortinet | FortiClient | FortiClientWindows toutes versions 7.0.x | ||
| Fortinet | FortiClient | FortiClientEMS toutes versions 6.4.x | ||
| Fortinet | FortiOS | FortiOS toutes versions 7.2.x | ||
| Fortinet | FortiProxy | FortiProxy versions 7.6.x antérieures à 7.6.3 | ||
| Fortinet | FortiADC | FortiADC versions 7.4.x antérieures à 7.4.7 | ||
| Fortinet | FortiADC | FortiADC toutes versions 6.2.x | ||
| Fortinet | FortiPAM | FortiPAM versions 1.3.x antérieures à 1.3.1 | ||
| Fortinet | FortiADC | FortiADC versions 7.1.x antérieures à 7.1.5 | ||
| Fortinet | FortiSRA | FortiSRA versions 1.4.x antérieures à 1.4.2 | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 2.0.x | ||
| Fortinet | FortiClient | FortiClientWindows versions 7.2.x antérieures à 7.2.7 | ||
| Fortinet | FortiADC | FortiADC toutes versions 6.1.x | ||
| Fortinet | FortiOS | FortiOS versions 7.4.x antérieures à 7.4.8 | ||
| Fortinet | FortiProxy | FortiProxy toutes versions 7.0.x | ||
| Fortinet | FortiADC | FortiADC versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiPAM | FortiPAM versions 1.2.x antérieures à 1.2.1 | ||
| Fortinet | FortiClient | FortiClientEMS toutes versions 6.2.x | ||
| Fortinet | FortiPAM | FortiPAM versions 1.0.x antérieures à 1.0.4 | ||
| Fortinet | FortiPortal | FortiPortal versions 7.2.x antérieures à 7.2.6 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "FortiProxy versions 7.4.x ant\u00e9rieures \u00e0 7.4.9",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 7.2.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 1.1.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPortal versions 7.0.x ant\u00e9rieures \u00e0 7.0.9",
"product": {
"name": "FortiPortal",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.4.x ant\u00e9rieures \u00e0 1.4.2",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC toutes versions 7.0.x",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientEMS versions 7.4.x ant\u00e9rieures \u00e0 7.4.3",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientEMS versions 7.2.x ant\u00e9rieures \u00e0 7.2.7",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS toutes versions 6.4.x",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientWindows versions 7.4.x ant\u00e9rieures \u00e0 7.4.1",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 1.2.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.2.x ant\u00e9rieures \u00e0 7.2.8",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS toutes versions 7.0.x",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.4.x ant\u00e9rieures \u00e0 7.4.7",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS toutes versions 6.2.x",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.1.x ant\u00e9rieures \u00e0 1.1.3",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPortal versions 7.4.x ant\u00e9rieures \u00e0 7.4.1",
"product": {
"name": "FortiPortal",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientWindows toutes versions 7.0.x",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientEMS toutes versions 6.4.x",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS toutes versions 7.2.x",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy versions 7.6.x ant\u00e9rieures \u00e0 7.6.3",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.4.x ant\u00e9rieures \u00e0 7.4.7",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC toutes versions 6.2.x",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.3.x ant\u00e9rieures \u00e0 1.3.1",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.1.x ant\u00e9rieures \u00e0 7.1.5",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSRA versions 1.4.x ant\u00e9rieures \u00e0 1.4.2",
"product": {
"name": "FortiSRA",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 2.0.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientWindows versions 7.2.x ant\u00e9rieures \u00e0 7.2.7",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC toutes versions 6.1.x",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS versions 7.4.x ant\u00e9rieures \u00e0 7.4.8",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy toutes versions 7.0.x",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.2.x ant\u00e9rieures \u00e0 1.2.1",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiClientEMS toutes versions 6.2.x",
"product": {
"name": "FortiClient",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.0.x ant\u00e9rieures \u00e0 1.0.4",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPortal versions 7.2.x ant\u00e9rieures \u00e0 7.2.6",
"product": {
"name": "FortiPortal",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-32119",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-32119"
},
{
"name": "CVE-2023-48786",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48786"
},
{
"name": "CVE-2024-50562",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50562"
},
{
"name": "CVE-2025-22256",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22256"
},
{
"name": "CVE-2023-29184",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29184"
},
{
"name": "CVE-2024-54019",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54019"
},
{
"name": "CVE-2025-24471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24471"
},
{
"name": "CVE-2025-31104",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31104"
},
{
"name": "CVE-2024-45329",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45329"
},
{
"name": "CVE-2024-50568",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50568"
},
{
"name": "CVE-2025-25250",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25250"
},
{
"name": "CVE-2025-22251",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22251"
},
{
"name": "CVE-2025-22254",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22254"
},
{
"name": "CVE-2025-22862",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22862"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0496",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-06-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Fortinet. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet",
"vendor_advisories": [
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-385",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-385"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-274",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-274"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-257",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-257"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-099",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-099"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-375",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-375"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-058",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-058"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-008",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-008"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-006",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-006"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-287",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-287"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-342",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-342"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-008",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-008"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-544",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-544"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-339",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-339"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-365",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-365"
}
]
}
NCSC-2025-0192
Vulnerability from csaf_ncscnl - Published: 2025-06-12 11:04 - Updated: 2025-06-12 11:04Summary
Kwetsbaarheden verholpen in Fortinet FortiOS
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Fortinet heeft kwetsbaarheden verholpen in FortiOS.
Interpretaties
De kwetsbaarheden omvatten onder andere een onjuiste certificaatvalidatie die het mogelijk maakt voor aanvallers om verbinding te maken met FortiClient via ingetrokken certificaten, wat leidt tot ongeautoriseerde toegang. Daarnaast zijn er kwetsbaarheden in de sessie-expiratie en privilegebeheer die aanvallers in staat stellen om ongeautoriseerde toegang te verkrijgen tot gevoelige instellingen en systemen. De exploitatie van deze kwetsbaarheden kan leiden tot gevolgen voor de integriteit van de netwerken en systemen die deze producten gebruiken.
Oplossingen
Fortinet heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-1390
Weak Authentication
CWE-923
Improper Restriction of Communication Channel to Intended Endpoints
CWE-297
Improper Validation of Certificate with Host Mismatch
CWE-613
Insufficient Session Expiration
CWE-300
Channel Accessible by Non-Endpoint
CWE-295
Improper Certificate Validation
CWE-459
Incomplete Cleanup
CWE-918
Server-Side Request Forgery (SSRF)
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-269
Improper Privilege Management
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Fortinet heeft kwetsbaarheden verholpen in FortiOS.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten onder andere een onjuiste certificaatvalidatie die het mogelijk maakt voor aanvallers om verbinding te maken met FortiClient via ingetrokken certificaten, wat leidt tot ongeautoriseerde toegang. Daarnaast zijn er kwetsbaarheden in de sessie-expiratie en privilegebeheer die aanvallers in staat stellen om ongeautoriseerde toegang te verkrijgen tot gevoelige instellingen en systemen. De exploitatie van deze kwetsbaarheden kan leiden tot gevolgen voor de integriteit van de netwerken en systemen die deze producten gebruiken.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Fortinet heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Weak Authentication",
"title": "CWE-1390"
},
{
"category": "general",
"text": "Improper Restriction of Communication Channel to Intended Endpoints",
"title": "CWE-923"
},
{
"category": "general",
"text": "Improper Validation of Certificate with Host Mismatch",
"title": "CWE-297"
},
{
"category": "general",
"text": "Insufficient Session Expiration",
"title": "CWE-613"
},
{
"category": "general",
"text": "Channel Accessible by Non-Endpoint",
"title": "CWE-300"
},
{
"category": "general",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "general",
"text": "Incomplete Cleanup",
"title": "CWE-459"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Improper Privilege Management",
"title": "CWE-269"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-23-008"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-23-342"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-23-375"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-058"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-257"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-339"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-365"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-544"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-006"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-287"
}
],
"title": "Kwetsbaarheden verholpen in Fortinet FortiOS",
"tracking": {
"current_release_date": "2025-06-12T11:04:45.167843Z",
"generator": {
"date": "2025-06-05T14:45:00Z",
"engine": {
"name": "V.A.",
"version": "1.1"
}
},
"id": "NCSC-2025-0192",
"initial_release_date": "2025-06-12T11:04:45.167843Z",
"revision_history": [
{
"date": "2025-06-12T11:04:45.167843Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:fortinet/6.2.17",
"product": {
"name": "vers:fortinet/6.2.17",
"product_id": "CSAFPID-2906543"
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.6.0|\u003c=7.6.1",
"product": {
"name": "vers:semver/7.6.0|\u003c=7.6.1",
"product_id": "CSAFPID-2906446",
"product_identification_helper": {
"cpe": "cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:semver/6.2.0|\u003c=6.2.17",
"product": {
"name": "vers:semver/6.2.0|\u003c=6.2.17",
"product_id": "CSAFPID-2906435",
"product_identification_helper": {
"cpe": "cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:semver/6.4.0|\u003c=6.4.16",
"product": {
"name": "vers:semver/6.4.0|\u003c=6.4.16",
"product_id": "CSAFPID-2632962",
"product_identification_helper": {
"cpe": "cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.0.0|\u003c=7.0.17",
"product": {
"name": "vers:semver/7.0.0|\u003c=7.0.17",
"product_id": "CSAFPID-2632961",
"product_identification_helper": {
"cpe": "cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.2.0|\u003c=7.2.11",
"product": {
"name": "vers:semver/7.2.0|\u003c=7.2.11",
"product_id": "CSAFPID-2632960",
"product_identification_helper": {
"cpe": "cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.4.0|\u003c=7.4.7",
"product": {
"name": "vers:semver/7.4.0|\u003c=7.4.7",
"product_id": "CSAFPID-2632959",
"product_identification_helper": {
"cpe": "cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "FortiOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:semver/1.1.0|\u003c=1.1.6",
"product": {
"name": "vers:semver/1.1.0|\u003c=1.1.6",
"product_id": "CSAFPID-1299473"
}
},
{
"category": "product_version_range",
"name": "vers:semver/1.2.0|\u003c=1.2.13",
"product": {
"name": "vers:semver/1.2.0|\u003c=1.2.13",
"product_id": "CSAFPID-1299472"
}
},
{
"category": "product_version_range",
"name": "vers:semver/2.0.0|\u003c=2.0.14",
"product": {
"name": "vers:semver/2.0.0|\u003c=2.0.14",
"product_id": "CSAFPID-1299471"
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.0.0|\u003c=7.0.20",
"product": {
"name": "vers:semver/7.0.0|\u003c=7.0.20",
"product_id": "CSAFPID-1768230"
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.2.0|\u003c=7.2.14",
"product": {
"name": "vers:semver/7.2.0|\u003c=7.2.14",
"product_id": "CSAFPID-2906444"
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.4.0|\u003c=7.4.7",
"product": {
"name": "vers:semver/7.4.0|\u003c=7.4.7",
"product_id": "CSAFPID-2906447"
}
}
],
"category": "product_name",
"name": "FortiProxy"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:semver/7.0.0|\u003c=7.0.14",
"product": {
"name": "vers:semver/7.0.0|\u003c=7.0.14",
"product_id": "CSAFPID-1768242"
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.2.0|\u003c=7.2.6",
"product": {
"name": "vers:semver/7.2.0|\u003c=7.2.6",
"product_id": "CSAFPID-2013415"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.4.0",
"product": {
"name": "vers:unknown/7.4.0",
"product_id": "CSAFPID-1299459"
}
}
],
"category": "product_name",
"name": "FortiClientWindows"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/7.4.0",
"product": {
"name": "vers:unknown/7.4.0",
"product_id": "CSAFPID-1768181"
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.2.0|\u003c=7.2.4",
"product": {
"name": "vers:semver/7.2.0|\u003c=7.2.4",
"product_id": "CSAFPID-1768182"
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.0.0|\u003c=7.0.13",
"product": {
"name": "vers:semver/7.0.0|\u003c=7.0.13",
"product_id": "CSAFPID-1768183"
}
}
],
"category": "product_name",
"name": "FortiClientEMS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:semver/7.4.0|\u003c=7.4.6",
"product": {
"name": "vers:semver/7.4.0|\u003c=7.4.6",
"product_id": "CSAFPID-1768203"
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.6.0|\u003c=7.6.1",
"product": {
"name": "vers:semver/7.6.0|\u003c=7.6.1",
"product_id": "CSAFPID-1768202"
}
}
],
"category": "product_name",
"name": "FortiWeb"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:fortinet/24.4.b",
"product": {
"name": "vers:fortinet/24.4.b",
"product_id": "CSAFPID-2906528"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/25.1.a.2",
"product": {
"name": "vers:fortinet/25.1.a.2",
"product_id": "CSAFPID-2906514"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/25.1.c",
"product": {
"name": "vers:fortinet/25.1.c",
"product_id": "CSAFPID-2906527"
}
}
],
"category": "product_name",
"name": "FortiSASE"
}
],
"category": "vendor",
"name": "Fortinet"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-24471",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24471 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-24471.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2025-24471"
},
{
"cve": "CVE-2024-50562",
"cwe": {
"id": "CWE-613",
"name": "Insufficient Session Expiration"
},
"notes": [
{
"category": "other",
"text": "Insufficient Session Expiration",
"title": "CWE-613"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-50562 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-50562.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2024-50562"
},
{
"cve": "CVE-2025-22862",
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-22862 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-22862.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2025-22862"
},
{
"cve": "CVE-2025-22254",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "other",
"text": "Improper Privilege Management",
"title": "CWE-269"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-22254 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-22254.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2025-22254"
},
{
"cve": "CVE-2024-50568",
"cwe": {
"id": "CWE-300",
"name": "Channel Accessible by Non-Endpoint"
},
"notes": [
{
"category": "other",
"text": "Channel Accessible by Non-Endpoint",
"title": "CWE-300"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-50568 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-50568.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2024-50568"
},
{
"cve": "CVE-2025-25250",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-25250 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-25250.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2025-25250"
},
{
"cve": "CVE-2023-29184",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "other",
"text": "Incomplete Cleanup",
"title": "CWE-459"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-29184 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-29184.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2023-29184"
},
{
"cve": "CVE-2025-22251",
"cwe": {
"id": "CWE-923",
"name": "Improper Restriction of Communication Channel to Intended Endpoints"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Communication Channel to Intended Endpoints",
"title": "CWE-923"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-22251 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-22251.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2025-22251"
},
{
"cve": "CVE-2024-54019",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Certificate with Host Mismatch",
"title": "CWE-297"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54019 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-54019.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2024-54019"
},
{
"cve": "CVE-2024-32119",
"cwe": {
"id": "CWE-1390",
"name": "Weak Authentication"
},
"notes": [
{
"category": "other",
"text": "Weak Authentication",
"title": "CWE-1390"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-32119 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-32119.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2024-32119"
},
{
"cve": "CVE-2023-48786",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-48786 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2023/cve-2023-48786.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2906543",
"CSAFPID-2906446",
"CSAFPID-2906435",
"CSAFPID-2632962",
"CSAFPID-2632961",
"CSAFPID-2632960",
"CSAFPID-2632959",
"CSAFPID-1299473",
"CSAFPID-1299472",
"CSAFPID-1299471",
"CSAFPID-1768230",
"CSAFPID-2906444",
"CSAFPID-2906447",
"CSAFPID-1768242",
"CSAFPID-2013415",
"CSAFPID-1299459",
"CSAFPID-1768181",
"CSAFPID-1768182",
"CSAFPID-1768183",
"CSAFPID-1768203",
"CSAFPID-1768202",
"CSAFPID-2906528",
"CSAFPID-2906514",
"CSAFPID-2906527"
]
}
],
"title": "CVE-2023-48786"
}
]
}
WID-SEC-W-2025-1289
Vulnerability from csaf_certbund - Published: 2025-06-10 22:00 - Updated: 2025-06-10 22:00Summary
Fortinet FortiClient EMS: Mehrere Schwachstellen ermöglichen Codeausführung
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
FortiClient ist ein Endgeräteschutz mit einem integrierten VPN-Client.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Fortinet FortiClient EMS ausnutzen, um Sicherheitsmaßnahmen zu umgehen und potentiell Code auszuführen.
Betroffene Betriebssysteme
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "FortiClient ist ein Endger\u00e4teschutz mit einem integrierten VPN-Client.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Fortinet FortiClient EMS ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen und potentiell Code auszuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-1289 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1289.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-1289 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1289"
},
{
"category": "external",
"summary": "FortiGuard PSIRT Advisory FG-IR-23-342 vom 2025-06-10",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-342"
},
{
"category": "external",
"summary": "FortiGuard PSIRT Advisory FG-IR-23-375 vom 2025-06-10",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-375"
}
],
"source_lang": "en-US",
"title": "Fortinet FortiClient EMS: Mehrere Schwachstellen erm\u00f6glichen Codeausf\u00fchrung",
"tracking": {
"current_release_date": "2025-06-10T22:00:00.000+00:00",
"generator": {
"date": "2025-06-11T08:47:45.517+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2025-1289",
"initial_release_date": "2025-06-10T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-06-10T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "EMS \u003c7.4.1",
"product": {
"name": "Fortinet FortiClient EMS \u003c7.4.1",
"product_id": "T040221"
}
},
{
"category": "product_version",
"name": "EMS 7.4.1",
"product": {
"name": "Fortinet FortiClient EMS 7.4.1",
"product_id": "T040221-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:forticlient:ems__7.4.1"
}
}
},
{
"category": "product_version_range",
"name": "EMS \u003c7.2.5",
"product": {
"name": "Fortinet FortiClient EMS \u003c7.2.5",
"product_id": "T040222"
}
},
{
"category": "product_version",
"name": "EMS 7.2.5",
"product": {
"name": "Fortinet FortiClient EMS 7.2.5",
"product_id": "T040222-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:forticlient:ems__7.2.5"
}
}
},
{
"category": "product_version_range",
"name": "EMS \u003c7.4.3",
"product": {
"name": "Fortinet FortiClient EMS \u003c7.4.3",
"product_id": "T043725"
}
},
{
"category": "product_version",
"name": "EMS 7.4.3",
"product": {
"name": "Fortinet FortiClient EMS 7.4.3",
"product_id": "T043725-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:forticlient:ems__7.4.3"
}
}
},
{
"category": "product_version_range",
"name": "EMS \u003c7.2.7",
"product": {
"name": "Fortinet FortiClient EMS \u003c7.2.7",
"product_id": "T044501"
}
},
{
"category": "product_version",
"name": "EMS 7.2.7",
"product": {
"name": "Fortinet FortiClient EMS 7.2.7",
"product_id": "T044501-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:forticlient:ems__7.2.7"
}
}
}
],
"category": "product_name",
"name": "FortiClient"
}
],
"category": "vendor",
"name": "Fortinet"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48786",
"product_status": {
"known_affected": [
"T044501",
"T043725",
"T040222",
"T040221"
]
},
"release_date": "2025-06-10T22:00:00.000+00:00",
"title": "CVE-2023-48786"
},
{
"cve": "CVE-2024-32119",
"product_status": {
"known_affected": [
"T040222",
"T040221"
]
},
"release_date": "2025-06-10T22:00:00.000+00:00",
"title": "CVE-2024-32119"
}
]
}
FKIE_CVE-2024-32119
Vulnerability from fkie_nvd - Published: 2025-06-10 17:19 - Updated: 2025-07-16 15:20
Severity ?
Summary
An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.
References
| URL | Tags | ||
|---|---|---|---|
| psirt@fortinet.com | https://fortiguard.fortinet.com/psirt/FG-IR-23-375 | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| fortinet | forticlientems | * | |
| fortinet | forticlientems | * | |
| fortinet | forticlientems | * | |
| fortinet | forticlientems | * | |
| fortinet | forticlientems | 7.4.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*",
"matchCriteriaId": "46359866-6D0D-4479-A1E6-96EB1753DF6F",
"versionEndIncluding": "6.2.9",
"versionStartIncluding": "6.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F67F4416-C237-41A2-B7A4-2541EE60C972",
"versionEndIncluding": "6.4.9",
"versionStartIncluding": "6.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*",
"matchCriteriaId": "91D4223F-37D4-45D7-A767-2AA8EDAC9AEC",
"versionEndIncluding": "7.0.13",
"versionStartIncluding": "7.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C9FA0AB2-209D-4C5A-86E8-D5F88816CD60",
"versionEndExcluding": "7.2.5",
"versionStartIncluding": "7.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "22665641-9DD6-42BB-81E2-52E03153E114",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user\u0027s FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests."
},
{
"lang": "es",
"value": "Una vulnerabilidad de autenticaci\u00f3n incorrecta [CWE-287] en Fortinet FortiClientEMS versi\u00f3n 7.4.0 y anteriores a 7.2.4 permite que un atacante no autenticado con conocimiento del FCTUID y VDOM del usuario objetivo realice operaciones como cargar o etiquetar en nombre del usuario objetivo a trav\u00e9s de solicitudes TCP especialmente manipuladas."
}
],
"id": "CVE-2024-32119",
"lastModified": "2025-07-16T15:20:12.983",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 2.5,
"source": "psirt@fortinet.com",
"type": "Secondary"
}
]
},
"published": "2025-06-10T17:19:14.323",
"references": [
{
"source": "psirt@fortinet.com",
"tags": [
"Vendor Advisory"
],
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-23-375"
}
],
"sourceIdentifier": "psirt@fortinet.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-1390"
}
],
"source": "psirt@fortinet.com",
"type": "Primary"
}
]
}
GHSA-HCP3-9RG5-2F9P
Vulnerability from github – Published: 2025-06-10 18:32 – Updated: 2025-06-10 18:32
VLAI?
Details
An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.
Severity ?
4.8 (Medium)
{
"affected": [],
"aliases": [
"CVE-2024-32119"
],
"database_specific": {
"cwe_ids": [
"CWE-1390"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T17:19:14Z",
"severity": "MODERATE"
},
"details": "An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user\u0027s FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.",
"id": "GHSA-hcp3-9rg5-2f9p",
"modified": "2025-06-10T18:32:27Z",
"published": "2025-06-10T18:32:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32119"
},
{
"type": "WEB",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-23-375"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"type": "CVSS_V3"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…