H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2024-10-09
Last seen2024-10-09

Confidence

—

Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

Labels

exploitedkev

CISA KEV context

Vendor / productFortinet Multiple Products
Added2024-10-09
Due date2024-10-30
3 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2024-23113
open
cwe
CWE-134
open