CVE-2024-35273 HIGH

CVE-2024-35273

Vendor Fortinet

Product FortiAnalyzer

Weakness CWE-787

Published January 14, 2025

Last update January 14, 2025

View on NVD All CVEs

CVSS base score

7.0/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C

What the vulnerability does

01Description

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

Key dates

02Disclosure timeline

January 14, 2025 CVE published

January 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-35273 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/787.html

Related vulnerabilities

Identifiers

CVE CVE-2024-35273

CWE CWE-787

CVSS 7.0 / HIGH

Affected versions

Vendor Fortinet

Product FortiAnalyzer

Affected ≥ 7.4.0 and ≤ 7.4.3

Vendor Fortinet

Product FortiManager

Affected ≥ 7.4.0 and ≤ 7.4.2

CVE-2024-35273

01Description

02Disclosure timeline

03References

04Related CVE