CVE-2024-21762
CRITICAL CISA KEV RANSOMWARE
ACT NOW
Priority: 8.29
BB Relevance:
90/100
Published: 2024-02-09
Modified: 2026-10-22
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.
CISA Known Exploited Vulnerability
Vendor / Product
Fortinet — FortiOS
Date Added
2024-02-09
Remediation Due
2024-02-16
Ransomware Use
CONFIRMED
https://fortiguard.fortinet.com/psirt/FG-IR-24-015 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21762
Weakness Classification (1)
Affected Software (10)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortios | 6.0.0 – 6.0.18 |
| fortinet | fortios | 6.2.0 – 6.2.16 |
| fortinet | fortios | 6.4.0 – 6.4.15 |
| fortinet | fortios | 7.0.0 – 7.0.14 |
| fortinet | fortios | 7.2.0 – 7.2.7 |
| fortinet | fortios | 7.4.0 – 7.4.3 |
| fortinet | fortiproxy | 1.0.0 – 2.0.14 |
| fortinet | fortiproxy | 7.0.0 – 7.0.15 |
| fortinet | fortiproxy | 7.2.0 – 7.2.9 |
| fortinet | fortiproxy | 7.4.0 – 7.4.3 |
References & Advisories (2)
Vendor Advisory
US Government Resource