Exploit / PoCcriticalExploited in the wild

Multiple flaws in Fortinet FortiOS fixed

Security Affairsby @securityaffairsJun 13, 2024 · 08:31 UTC (Jun 13, 2024)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-23110 CVE-2024-26010 CVE-2024-23111 CVE-2023-46720 CVE-2024-21754

Tags: cve-2024-23110 cve-2024-26010 cve-2024-23111 cve-2023-46720 cve-2024-21754 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-23110 +2 related CVEs CVE-2023-46720 CVE-2024-26010	A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through…	7.8 group max	<1%		Jun 11, 2024
CVE-2024-23111 +1 related CVE CVE-2024-21754	An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all…	4.8 group max	1%		Jun 11, 2024

From the original article

2 min read at securityaffairs.com

Fortinet released security updates to address multiple vulnerabilities in FortiOS, including a high-severity code execution security issue. Fortinet addressed multiple vulnerabilities in FortiOS and other products, including some code execution flaws.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.