Weak authentication in Fortinet, Inc products - CVE-2024-50563

Vulnerability identifier: #VU107372

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-50563

CWE-ID: CWE-1390

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The vulnerability exists due to weak authentication in csfd daemon. An unauthenticated attacker with access to the security fabric interface and port can bypass the authentication process and access a restricted list of features.

FortiProxy
FortiOS
FortiAnalyzer
FortiManager
FortiAnalyzer Cloud

Install update from vendor's website.

FortiProxy - addressed in versions 2.0.15, 7.0.18, 7.2.11, 7.4.5
FortiOS - addressed in versions 7.0.16, 7.2.9, 7.4.5
FortiAnalyzer - addressed in versions 7.4.4, 7.6.2
FortiAnalyzer Cloud - update to 7.4.4
FortiManager - addressed in versions 7.4.4, 7.6.2

• https://www.fortiguard.com/psirt/FG-IR-24-221

• Multiple vulnerabilities in Fortinet products