Threat intelligence / Vulnerability
CVE-2024-55591
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
Vulnerability
TypeVulnerability
External ID—
First seen2025-01-14
Last seen2025-01-14
Confidence
—
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
Labels
CISA KEV context
Vendor / productFortinet FortiOS and FortiProxy
Added2025-01-14
Due date2025-01-21
3 recorded
Relationships
2 external