{"id":"CVE-2024-23113","state":"PUBLISHED","title":"A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7","description":"A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.","publishedAt":"2024-02-15T13:59:25.313Z","updatedAt":"2025-10-21T23:05:24.308Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiSwitchManager","Fortinet FortiOS","Fortinet FortiPAM","Fortinet FortiProxy"],"affected":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.3","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.3","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.6","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected","lessThanOrEqual":"1.1.2","versionType":"semver"},{"version":"1.0.0","status":"affected","lessThanOrEqual":"1.0.3","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.8","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.15","versionType":"semver"}]}],"references":["https://fortiguard.com/psirt/FG-IR-24-029","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23113"],"weaknesses":["CWE-134"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/23xxx/CVE-2024-23113.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-23113","state":"PUBLISHED","datePublished":"2024-02-15T13:59:25.313Z","dateUpdated":"2025-10-21T23:05:24.308Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2024-01-11T16:29:07.980Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets."}],"affected":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.3","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.3","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.6","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected","lessThanOrEqual":"1.1.2","versionType":"semver"},{"version":"1.0.0","status":"affected","lessThanOrEqual":"1.0.3","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.8","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.15","versionType":"semver"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-029","name":"https://fortiguard.com/psirt/FG-IR-24-029"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-134","lang":"en","description":"Execute unauthorized code or commands","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2024-02-15T13:59:25.313Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiWeb version 7.4.3 or above \nPlease upgrade to FortiVoice version 7.0.2 or above \nPlease upgrade to FortiVoice version 6.4.9 or above \nPlease upgrade to FortiSwitchManager version 7.2.4 or above \nPlease upgrade to FortiSwitchManager version 7.0.4 or above \nPlease upgrade to FortiOS version 7.4.3 or above \nPlease upgrade to FortiOS version 7.2.7 or above \nPlease upgrade to FortiOS version 7.0.14 or above \nPlease upgrade to FortiAuthenticator version 7.0.0 or above \nPlease upgrade to FortiPAM version 1.2.1 or above \nPlease upgrade to FortiPAM version 1.1.3 or above \nPlease upgrade to FortiProxy version 7.4.3 or above \nPlease upgrade to FortiProxy version 7.2.9 or above \nPlease upgrade to FortiProxy version 7.0.16 or above"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-029","name":"https://fortiguard.com/psirt/FG-IR-24-029","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T22:51:11.285Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"fortinet","product":"fortiswitchmanager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.3","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.3","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortiswitchmanager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.3","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.3","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.6","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.6","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.6","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.8","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.15","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.8","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.15","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.2","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.8","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.15","versionType":"semver"}],"cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unaffected","versions":[{"version":"1.1.0","status":"affected","lessThanOrEqual":"1.1.2","versionType":"semver"},{"version":"1.0.0","status":"affected","lessThanOrEqual":"1.0.3","versionType":"semver"},{"version":"1.2.0","status":"affected"}],"cpes":["cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unaffected","versions":[{"version":"1.1.0","status":"affected","lessThanOrEqual":"1.1.2","versionType":"semver"},{"version":"1.0.0","status":"affected","lessThanOrEqual":"1.0.3","versionType":"semver"},{"version":"1.2.0","status":"affected"}],"cpes":["cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unaffected","versions":[{"version":"1.1.0","status":"affected","lessThanOrEqual":"1.1.2","versionType":"semver"},{"version":"1.0.0","status":"affected","lessThanOrEqual":"1.0.3","versionType":"semver"},{"version":"1.2.0","status":"affected"}],"cpes":["cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23113","tags":["government-resource"]}],"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-23113","role":"CISA Coordinator","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-10-09T12:58:44.488595Z"}}},{"other":{"type":"kev","content":{"dateAdded":"2024-10-09","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23113"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-21T23:05:24.308Z"},"timeline":[{"time":"2024-10-09T00:00:00.000Z","lang":"en","value":"CVE-2024-23113 added to CISA KEV"}]}]}}}