Vulnerabilities CVE-2024-55591

CVE-2024-55591

Critical

Open

KEV

TLP:CLEAR

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Details

CVSS Score: 9.6
EPSS Score ⓘ: 98.26%

99.9th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
Confidence: 100%
Published: Jan 14, 2025
Last Modified: Aug 5, 2026
CISA KEV
Date Added: Jan 14, 2025
Patch Due: Jan 21, 2025
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.