PT-2026-24240 · Fortinet · Fortiswitchaxfixed

Publicado 2026-03-10 · Atualizado 2026-03-18 · CVE-2026-22627

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiSwitchAXFixed versions 1.0.0 through 1.0.1

Description A buffer copy issue exists where the size of the input is not checked, potentially allowing an unauthenticated attacker on the same network to execute code or commands on the device. This can occur by sending a specially crafted LLDP (Link Layer Discovery Protocol) packet.

Recommendations Update FortiSwitchAXFixed to a version beyond 1.0.1.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

BDU:2026-03210

CVE-2026-22627

Produtos afetados

Fortiswitchaxfixed

Referências · 6

• https://twitter.com/CveFindCom/status/2031440370706375053 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2034136478574432752 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22627 · Nota de Segurança
• https://twitter.com/ptdbugs/status/2031429834417561623 · Publicação no Twitter
• https://fortiguard.fortinet.com/psirt/FG-IR-26-086 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-03210 · Nota de Segurança