CVE-2024-23109
50Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 9.7epss 3.2%
from disclosure to weapon
Published on NVDFeb 5
VulnCheck+386d
exploitation probability
3.2%top 12% of all CVEs
observed exploitation
yesVulnCheck
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:X/RC:X
Affected products
Fortinet · FortiSIEM