Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

Critical Fortinet FortiSwitch flaw allows remote attackers to change admin passwords

Security Affairsby @securityaffairs ()1 min read2
Read at securityaffairs.com
Analyze CVE-2024-48887 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2024-48887CVE-2024-26010
Tags
cve-2024-48887cve-2024-26010vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-26010
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all…
7.5<1%
CVE-2024-48887
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially…
9.815%

From the original article

1 min read at securityaffairs.com

Fortinet addressed a critical vulnerability in its FortiSwitch devices that can be exploited to change administrator passwords remotely. Fortinet has released security updates to address a critical vulnerability, tracked as CVE-2024-48887 (CVSS score 9. 8), in its FortiSwitch devices.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.