PT-2025-1191 · Fortinet · Fortisandbox

Published 2025-01-14 · Updated 2025-01-31 · CVE-2024-27778

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Fortinet FortiSandbox versions 4.4.0 through 4.4.4 Fortinet FortiSandbox versions 4.2.0 through 4.2.6 Fortinet FortiSandbox versions prior to 4.0.4

Description The issue is related to an improper neutralization of special elements used in an OS Command, allowing an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests. This can be exploited by a remote attacker to execute arbitrary commands using specially crafted requests.

Recommendations For Fortinet FortiSandbox versions 4.4.0 through 4.4.4, update to a version outside of this range to mitigate the risk. For Fortinet FortiSandbox versions 4.2.0 through 4.2.6, update to a version outside of this range to mitigate the risk. For Fortinet FortiSandbox versions prior to 4.0.4, update to version 4.0.4 or later to mitigate the risk. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-00474

CVE-2024-27778

Affected Products

Fortisandbox

References · 7

• https://bdu.fstec.ru/vul/2025-00474 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-24-061 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27778 · Security Note
• https://osv.dev/vulnerability/CVE-2024-27778 · Vendor Advisory
• https://twitter.com/CVEnew/status/1879174640578515371 · Twitter Post
• https://reddit.com/r/k12cybersecurity/comments/1i1xpbm/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://t.me/cvenotify/109490 · Telegram Post