PT-2024-7217 · Fortinet · Fortigate+2

Published 2024-10-23 · Updated 2026-01-29 · CVE-2024-47575

Positive Technologies · (AI Summary)

CVSS v2.0

10

Critical

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiManager versions 6.2.0 through 6.2.12 FortiManager versions 6.4.0 through 6.4.14 FortiManager versions 7.0.0 through 7.0.12 FortiManager versions 7.2.0 through 7.2.7 FortiManager versions 7.4.0 through 7.4.4 FortiManager version 7.6.0 FortiManager Cloud versions 6.4.1 through 6.4.7 FortiManager Cloud versions 7.0.1 through 7.0.12 FortiManager Cloud versions 7.2.1 through 7.2.7 FortiManager Cloud versions 7.4.1 through 7.4.4

Description The vulnerability is related to a missing authentication for a critical function in FortiManager, allowing remote, unauthenticated attackers to execute arbitrary code or commands via specially crafted requests. This issue has been actively exploited in the wild, with over 15,000 FortiGate devices reportedly breached, resulting in the theft of IPs and credentials. The vulnerability affects various versions of FortiManager and FortiManager Cloud, and it is recommended to update to the latest version to mitigate the risk.

Recommendations For FortiManager versions 6.2.0 through 6.2.12, update to a version outside of this range. For FortiManager versions 6.4.0 through 6.4.14, update to a version outside of this range. For FortiManager versions 7.0.0 through 7.0.12, update to a version outside of this range. For FortiManager versions 7.2.0 through 7.2.7, update to a version outside of this range. For FortiManager versions 7.4.0 through 7.4.4, update to a version outside of this range. For FortiManager version 7.6.0, update to a version outside of this range. For FortiManager Cloud versions 6.4.1 through 6.4.7, update to a version outside of this range. For FortiManager Cloud versions 7.0.1 through 7.0.12, update to a version outside of this range. For FortiManager Cloud versions 7.2.1 through 7.2.7, update to a version outside of this range. For FortiManager Cloud versions 7.4.1 through 7.4.4, update to a version outside of this range.

Exploit

Fix

RCE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2024-08556

CVE-2024-47575

FORTINETFGFM_CVE2024_47575

Affected Products

Fortigate

Fortimanager

Fortimanager Cloud

References · 161

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/fortimanager_rce_cve_2024_47575.rb · Exploit
• 🔥 https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575 · Exploit
• 🔥 https://github.com/XiaomingX/cve-2024-47575-exp · Exploit
• 🔥 https://github.com/maybelookis/CVE-2024-47575 · Exploit
• 🔥 https://github.com/hazesecurity/CVE-2024-47575 · Exploit
• 🔥 https://github.com/HazeLook/CVE-2024-47575 · Exploit
• 🔥 https://github.com/skyalliance/exploit-cve-2024-47575 · Exploit
• 🔥 https://github.com/expl0itsecurity/CVE-2024-47575 · Exploit
• 🔥❌ https://github.com/Jaden1419/CVE-2024-47575 · Exploit, Deleted
• 🔥 https://fortiguard.fortinet.com/psirt/FG-IR-24-423 · Exploit
• https://bdu.fstec.ru/vul/2024-08556 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47575 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/713190 · Security Note
• https://t.me/securixy_kz/1044 · Telegram Post