PT-2025-1188 · Fortinet · Fortianalyzer+4

Published 2025-01-14 · Updated 2025-09-24 · CVE-2024-50563

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.4.1 through 7.4.3 FortiAnalyzer versions 7.6.0 through 7.6.1 FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 FortiManager versions 7.4.1 through 7.4.3 FortiManager versions 7.6.0 through 7.6.1 FortiManager Cloud versions 7.4.1 through 7.4.3 FortiManager Cloud versions 7.6.0 through 7.6.1

Description A weak authentication in Fortinet products allows an attacker to execute unauthorized code or commands via a brute-force attack. This issue is related to the bypass of authentication, which can be exploited by a remote attacker to execute arbitrary code or commands. The vulnerability may allow an unauthenticated attacker with access to the Security Fabric interface and port to bruteforce the authentication process in the Security Fabric protocol and take control of the devices of the Fabric.

Recommendations For FortiAnalyzer versions 7.4.1 through 7.4.3, update to a version that includes a fix for this issue. For FortiAnalyzer versions 7.6.0 through 7.6.1, update to a version that includes a fix for this issue. For FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, update to a version that includes a fix for this issue. For FortiManager versions 7.4.1 through 7.4.3, update to a version that includes a fix for this issue. For FortiManager versions 7.6.0 through 7.6.1, update to a version that includes a fix for this issue. For FortiManager Cloud versions 7.4.1 through 7.4.3, update to a version that includes a fix for this issue. For FortiManager Cloud versions 7.6.0 through 7.6.1, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the Security Fabric interface and port to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-1390

Related Identifiers

BDU:2025-00471

CVE-2024-50563

Affected Products

Fortianalyzer

Fortianalyzer Cloud

Fortimanager

Fortimanager Cloud

Fortios

References · 11

• https://fortiguard.fortinet.com/psirt/FG-IR-24-221 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00471 · Security Note
• https://osv.dev/vulnerability/CVE-2024-50563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50563 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50563 · Security Note
• https://t.me/cveNotify/136290 · Telegram Post
• https://t.me/cvenotify/109772 · Telegram Post
• https://reddit.com/r/k12cybersecurity/comments/1i1xpbm/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://fortiguard.com/psirt/FG-IR-24-221 · Note
• https://twitter.com/CVEnew/status/1879858731175059502 · Twitter Post
• https://t.me/cvedetector/15574 · Telegram Post