CVE-2024-26009
Description
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.15, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.
How to fix
- fortinet fortiswitchmanager7.0.4, 7.2.4 or later
- fortinet fortiproxy7.0.16, 7.2.9, 7.4.3 or later
- fortinet fortios6.2.17, 6.4.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortiswitchmanager | 7.0.0 ≤ v < 7.0.4, 7.2.0 ≤ v < 7.2.4 | 7.0.4, 7.2.4 |
| fortinet fortiproxy | 7.0.0 ≤ v < 7.0.16, 7.2.0 ≤ v < 7.2.9, 7.4.0 ≤ v < 7.4.3 | 7.0.16, 7.2.9, 7.4.3 |
| fortinet fortipam | 1.0.0 ≤ v ≤ 1.2.0 | — |
| fortinet fortios | 6.0.0 ≤ v < 6.2.17, 6.4.0 ≤ v < 6.4.16 | 6.2.17, 6.4.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.