what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

CVE-2024-47575

Fortinet FortiManager Unauthenticated Remote Code Execution

Posted Dec 3, 2024

Authored by sfewer-r7 | Site metasploit.com

This Metasploit module exploits a missing authentication vulnerability affecting FortiManager and FortiManager Cloud devices to achieve unauthenticated RCE with root privileges. The vulnerable FortiManager versions are 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, and 6.2.0 through 6.2.12. The vulnerable FortiManager Cloud versions are 7.4.1 through 7.4.4, 7.2.1 through 7.2.7, 7.0.1 through 7.0.12, and 6.4 (all versions).

tags | exploit, root

advisories | CVE-2024-47575

SHA-256 | b2e54e731409406acb805cc0ea0c9c798ab91d51bdf54a68cbbb6a2b772f054f

Download | Favorite | View