PT-2025-2438 · Fortinet · Fortianalyzer+3

Published 2025-01-14 · Updated 2025-01-31 · CVE-2024-35276

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 6.4.0 through 6.4.14 FortiAnalyzer versions 7.0.0 through 7.0.12 FortiAnalyzer versions 7.2.0 through 7.2.5 FortiAnalyzer versions 7.4.0 through 7.4.3 FortiAnalyzer Cloud versions 6.4.1 through 6.4.7 FortiAnalyzer Cloud versions 7.0.1 through 7.0.11 FortiAnalyzer Cloud versions 7.2.1 through 7.2.5 FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 FortiManager versions 6.4.0 through 6.4.14 FortiManager versions 7.0.0 through 7.0.12 FortiManager versions 7.2.0 through 7.2.5 FortiManager versions 7.4.0 through 7.4.3 FortiManager Cloud versions 6.4.1 through 6.4.7 FortiManager Cloud versions 7.0.1 through 7.0.11 FortiManager Cloud versions 7.2.1 through 7.2.5 FortiManager Cloud versions 7.4.1 through 7.4.3

Description: A stack-based buffer overflow allows attackers to execute unauthorized code or commands via specially crafted packets.

Recommendations: For FortiAnalyzer versions 6.4.0 through 6.4.14, update to a version outside of this range. For FortiAnalyzer versions 7.0.0 through 7.0.12, update to a version outside of this range. For FortiAnalyzer versions 7.2.0 through 7.2.5, update to a version outside of this range. For FortiAnalyzer versions 7.4.0 through 7.4.3, update to a version outside of this range. For FortiAnalyzer Cloud versions 6.4.1 through 6.4.7, update to a version outside of this range. For FortiAnalyzer Cloud versions 7.0.1 through 7.0.11, update to a version outside of this range. For FortiAnalyzer Cloud versions 7.2.1 through 7.2.5, update to a version outside of this range. For FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, update to a version outside of this range. For FortiManager versions 6.4.0 through 6.4.14, update to a version outside of this range. For FortiManager versions 7.0.0 through 7.0.12, update to a version outside of this range. For FortiManager versions 7.2.0 through 7.2.5, update to a version outside of this range. For FortiManager versions 7.4.0 through 7.4.3, update to a version outside of this range. For FortiManager Cloud versions 6.4.1 through 6.4.7, update to a version outside of this range. For FortiManager Cloud versions 7.0.1 through 7.0.11, update to a version outside of this range. For FortiManager Cloud versions 7.2.1 through 7.2.5, update to a version outside of this range. For FortiManager Cloud versions 7.4.1 through 7.4.3, update to a version outside of this range. As a temporary workaround, consider restricting access to the vulnerable systems until a patch is available.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2024-35276

Affected Products

Fortianalyzer

Fortianalyzer Cloud

Fortimanager

Fortimanager Cloud

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-35276 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35276 · Vendor Advisory
• https://fortiguard.fortinet.com/psirt/FG-IR-24-165 · Vendor Advisory
• https://t.me/cvenotify/109469 · Telegram Post
• https://reddit.com/r/k12cybersecurity/comments/1i1xpbm/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://twitter.com/CVEnew/status/1879174649629835465 · Twitter Post