CVE-2024-45324

A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0 through 1.4.2 and before 1.3.1, FortiSRA version 1.4.0 through 1.4.2 and before 1.3.1 and FortiWeb version 7.4.0 through 7.4.5, version 7.2.0 through 7.2.10 and before 7.0.10 allows a privileged attacker to execute unauthorized code or commands via specially crafted HTTP or HTTPS commands.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://fortiguard.fortinet.com/psirt/FG-IR-24-325	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::

Configuration 2 (hide)

OR	cpe:2.3:o:fortinet:fortipam::::::::
	cpe:2.3:o:fortinet:fortipam::::::::

Configuration 3 (hide)

OR	cpe:2.3:a:fortinet:fortiproxy::::::::
	cpe:2.3:a:fortinet:fortiproxy::::::::
	cpe:2.3:a:fortinet:fortiproxy::::::::
	cpe:2.3:a:fortinet:fortiproxy:7.6.0:::::::*

Configuration 4 (hide)

OR	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:a:fortinet:fortiweb:7.6.0:::::::*

Configuration 5 (hide)

cpe:2.3:a:fortinet:fortisra:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-03-11 15:15

Updated : 2025-07-24 19:06

NVD link : CVE-2024-45324

Mitre link : CVE-2024-45324

CVE.ORG link : CVE-2024-45324

JSON object : View

Products Affected

fortinet

fortiweb
fortisra
fortios
fortiproxy
fortipam

CWE

CWE-134

Use of Externally-Controlled Format String

{"id": "CVE-2024-45324", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2025-03-11T15:15:41.743", "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-325", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-134"}]}], "descriptions": [{"lang": "en", "value": "A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0 through 1.4.2 and before 1.3.1, FortiSRA version 1.4.0 through 1.4.2 and before 1.3.1 and FortiWeb version 7.4.0 through 7.4.5, version 7.2.0 through 7.2.10 and before 7.0.10 allows a privileged attacker to execute unauthorized code or commands via specially crafted HTTP or HTTPS commands."}, {"lang": "es", "value": "Una vulnerabilidad de uso de cadena de formato controlada externamente [CWE-134] en FortiOS versi\u00f3n 7.4.0 a 7.4.4, versi\u00f3n 7.2.0 a 7.2.9, versi\u00f3n 7.0.0 a 7.0.15 y anteriores a 6.4.15, FortiProxy versi\u00f3n 7.4.0 a 7.4.6, versi\u00f3n 7.2.0 a 7.2.12 y anteriores a 7.0.19, FortiPAM versi\u00f3n 1.4.0 a 1.4.2 y anteriores a 1.3.1, FortiSRA versi\u00f3n 1.4.0 a 1.4.2 y anteriores a 1.3.1 y FortiWeb versi\u00f3n 7.4.0 a 7.4.5, versi\u00f3n 7.2.0 a 7.2.10 y anteriores a 7.0.10 permite a un atacante privilegiado ejecutar c\u00f3digo o comandos no autorizados a trav\u00e9s de comandos HTTP o HTTPS especialmente manipulados."}], "lastModified": "2025-07-24T19:06:14.957", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCCC7410-CFB4-4E3B-8B1D-8FAEDCBD46DC", "versionEndExcluding": "6.2.17", "versionStartIncluding": "6.2.0"}, {"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B481963F-0415-42C8-BB38-C1A8BDF4B9F7", "versionEndExcluding": "6.4.16", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EAE013D-7AE4-4C7A-81A0-296FE00F12CD", "versionEndExcluding": "7.0.16", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D7D031B-221B-4738-AC83-4FB92A106528", "versionEndExcluding": "7.2.10", "versionStartIncluding": "7.2.0"}, {"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A71AD879-997D-4787-A1E9-E4132AC521E2", "versionEndExcluding": "7.4.5", "versionStartIncluding": "7.4.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6AC9224-3994-4D38-B823-404AA8A2A854", "versionEndIncluding": "1.3.1", "versionStartIncluding": "1.0.0"}, {"criteria": "cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6142E55A-E939-4E25-BFB3-D7C97FACAD62", "versionEndExcluding": "1.4.3", "versionStartIncluding": "1.4.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B14CD59-F557-48A0-8458-BECD3AD7DB3A", "versionEndExcluding": "7.0.20", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDC18768-0891-465E-9900-3DF5D22A5CB3", "versionEndExcluding": "7.2.13", "versionStartIncluding": "7.2.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5029368F-7632-40BF-87A8-202FB3B3A571", "versionEndExcluding": "7.4.7", "versionStartIncluding": "7.4.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1A9E35E-AA55-44C4-BAAC-2E44E6DCE2EF"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E739890-CFEA-4B7B-B78D-8CC8157BDF54", "versionEndExcluding": "7.0.11", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B642678E-4E31-4A6B-A791-ACD5D332B175", "versionEndExcluding": "7.2.11", "versionStartIncluding": "7.2.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C1BD145-AA4F-4264-B996-1BEC7B282EBE", "versionEndExcluding": "7.4.6", "versionStartIncluding": "7.4.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28B43375-DA74-4C5F-BAEE-39F312EEF51F"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortisra:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E56CAA8-088C-4116-9C3B-A2E53A2BB82B", "versionEndExcluding": "1.4.3", "versionStartIncluding": "1.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}