CVE-2024-23113criticalunder attackCWE-134

CVE-2024-23113: critical vulnerability in Fortinet FortiOS

Published · Updated

Follow this CVE+ Monitor FortiOS+ Monitor FortiProxy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

90Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 9.8epss 62%
from disclosure to weapon239 days
Published on NVDFeb 15
1st PoC+239d
CISA KEV+237d
Action required by CISAfederal deadline: 2024-10-30

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

A format string vulnerability in multiple Fortinet products allows attackers to send specially crafted packets that can execute unauthorized code or commands on affected systems. This is critical because it gives attackers complete control over the device without needing special permissions.

Technical detail

Use of externally-controlled format string (CWE-134) in FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager allows remote code execution via malformed packets. The vulnerability requires no authentication and can be triggered by network-accessible services, resulting in arbitrary command execution with system privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C
Affected products
Fortinet · FortiOSFortinet · FortiPAMFortinet · FortiProxyFortinet · FortiSwitchManager
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Fortinet FortiOS

In the same product, most dangerous first.

CVE-2022-42475CRITICALCVE-2022-42475EPSS 99.5%KEVCVE-2024-55591CRITICALCVE-2024-55591EPSS 94.3%KEVCVE-2023-27997CRITICALCVE-2023-27997EPSS 86.8%KEVCVE-2026-24858CRITICALCVE-2026-24858EPSS 86.6%KEVCVE-2024-21762CRITICALCVE-2024-21762EPSS 84.6%KEVCVE-2025-59718CRITICALCVE-2025-59718EPSS 68.1%KEV