CVE-2024-47575criticalunder attackCWE-306

CVE-2024-47575: critical vulnerability in Fortinet FortiManager

Published · Updated

Follow this CVE+ Monitor FortiManager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA, has an official Brazilian government alert and has a working public exploit.

ssvc Actcvss 9.8epss 95%
from disclosure to weapon15 days
Published on NVDOct 23
1st PoC+15d
metasploitOct 23
CISA KEVOct 23
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

  • CTIR Gov · ALERTA 26/2024Vulnerabilidade crítica nos produtos FortiManager e FortiManager Cloudread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
Action required by CISAfederal deadline: 2024-11-13

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

FortiManager is missing authentication checks for critical functions, allowing anyone to send specially crafted requests and execute arbitrary code or commands on the system. This is a severe vulnerability that requires immediate patching.

Technical detail

CWE-306 (Missing Authentication for Critical Function) in FortiManager versions 6.2.0–7.6.0 and corresponding Cloud versions allows unauthenticated attackers to execute arbitrary code/commands via specially crafted requests to critical endpoints. No authentication is enforced before processing sensitive operations, enabling remote code execution without valid credentials.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C
Affected products
Fortinet · FortiManager
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Fortinet FortiManager

In the same product, most dangerous first.

CVE-2026-24858CRITICALCVE-2026-24858EPSS 86.6%KEVCVE-2023-25610CRITICALCVE-2023-25610EPSS 18.3%CVE-2024-48884MEDIUMCVE-2024-48884EPSS 15.2%CVE-2021-32589HIGHCVE-2021-32589EPSS 8.9%CVE-2023-42791HIGHCVE-2023-42791EPSS 4.0%CVE-2024-23666HIGHCVE-2024-23666EPSS 2.3%