PT-2025-11187 · Fortinet · Fortiddos-F

Published 2025-03-13 · Updated 2025-09-10 · CVE-2024-45325

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Fortinet FortiDDoS-F versions 7.0.0 through 7.02 Fortinet FortiDDoS-F versions prior to 6.6.3

Description: The software contains an improper neutralization of special elements used in an OS command, which may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests.

Recommendations: Update Fortinet FortiDDoS-F to a version after 7.02. Update Fortinet FortiDDoS-F to version 6.6.3 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-45325

Affected Products

Fortiddos-F

References · 9

• https://fortiguard.fortinet.com/psirt/FG-IR-24-344 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-45325 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45325 · Security Note
• https://t.me/CVEtracker/32074 · Telegram Post
• https://twitter.com/dpharristech/status/1965777379361542224 · Twitter Post
• https://reddit.com/r/Action1/comments/1jukmzc/%F0%9D%90%93%F0%9D%90%A8%F0%9D%90%9D%F0%9D%90%9A%F0%9D%90%B2%F0%9D%90%AC_%F0%9D%90%8F%F0%9D%90%9A%F0%9D%90%AD%F0%9D%90%9C%F0%9D%90%A1_%F0%9D%90%93%F0%9D%90%AE%F0%9D%90%9E%F0%9D%90%AC%F0%9D%90%9D%F0%9D%90%9A%F0%9D%90%B2_%F0%9D%90%A8%F0%9D%90%AF%F0%9D%90%9E%F0%9D%90%AB%F0%9D%90%AF%F0%9D%90%A2%F0%9D%90%9E%F0%9D%90%B0 · Reddit Post
• https://twitter.com/BaseFortify/status/1965696467223658700 · Twitter Post
• https://t.me/true_secator/6837 · Telegram Post
• https://twitter.com/CVEnew/status/1965418317180756306 · Twitter Post