{"id":"CVE-2024-23110","state":"PUBLISHED","title":"A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versio","description":"A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands","publishedAt":"2024-06-11T14:31:59.230Z","updatedAt":"2024-08-01T22:51:11.248Z","severity":{"score":7.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiOS"],"affected":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.6","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.14","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.15","versionType":"semver"},{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.18","versionType":"semver"}]}],"references":["https://fortiguard.com/psirt/FG-IR-23-460"],"weaknesses":["CWE-121"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/23xxx/CVE-2024-23110.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-23110","state":"PUBLISHED","datePublished":"2024-06-11T14:31:59.230Z","dateUpdated":"2024-08-01T22:51:11.248Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2024-01-11T16:29:07.979Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands"}],"affected":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.6","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.14","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.15","versionType":"semver"},{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.18","versionType":"semver"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-460","name":"https://fortiguard.com/psirt/FG-IR-23-460"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","lang":"en","description":"Execute unauthorized code or commands","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2024-06-11T14:31:59.230Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiOS version 7.4.3 or above \nPlease upgrade to FortiOS version 7.2.7 or above \nPlease upgrade to FortiOS version 7.0.14 or above \nPlease upgrade to FortiOS version 6.4.15 or above \nPlease upgrade to FortiOS version 6.2.16 or above \n"}]},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"custom"}],"cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.6","versionType":"custom"}],"cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"custom"}],"cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.14","versionType":"custom"}],"cpes":["cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.15","versionType":"custom"}],"cpes":["cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.18","versionType":"custom"}],"cpes":["cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-13T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2024-23110"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-14T03:55:22.225Z"}},{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-460","name":"https://fortiguard.com/psirt/FG-IR-23-460","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T22:51:11.248Z"}}]}}}