BaseFortify

Publication date: 2024-10-23

Last updated on: 2025-10-24

Assigner: Fortinet, Inc.

Description

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2024-10-23

Last Modified

2025-10-24

Generated

2026-10-23

AI Q&A

2024-10-23

EPSS Evaluated

2026-10-20

NVD

CVE-2024-47575

Affected Vendors & Products

Vendor	Product	Version / Range
fortinet	fortimanager	From 6.2.0 (inc) to 6.2.13 (exc)
fortinet	fortimanager	From 6.4.0 (inc) to 6.4.15 (exc)
fortinet	fortimanager	From 7.0.0 (inc) to 7.0.13 (exc)
fortinet	fortimanager	From 7.2.0 (inc) to 7.2.8 (exc)
fortinet	fortimanager	From 7.4.0 (inc) to 7.4.5 (exc)
fortinet	fortimanager	7.6.0
fortinet	fortimanager_cloud	From 6.4.1 (inc) to 6.4.7 (inc)
fortinet	fortimanager_cloud	From 7.0.1 (inc) to 7.0.13 (exc)
fortinet	fortimanager_cloud	From 7.2.1 (inc) to 7.2.8 (exc)
fortinet	fortimanager_cloud	From 7.4.1 (inc) to 7.4.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability, identified as CVE-2024-47575, occurs in certain versions of FortiManager software. It involves a lack of proper authentication for critical functions, which means that an attacker could potentially send specially crafted requests to the system. This could allow them to execute arbitrary code or commands, which is a serious security risk.

Impact Analysis

If you are using any of the affected versions of FortiManager, this vulnerability could allow attackers to take control of your system. They could execute harmful commands, which might lead to data breaches, loss of sensitive information, or disruption of services.

Compliance Impact

This vulnerability could significantly impact compliance with regulations like GDPR and HIPAA, which require organizations to protect sensitive data. If an attacker exploits this vulnerability and gains access to personal or health information, it could lead to violations of these regulations, resulting in legal penalties and damage to your organization's reputation.

Hi! I’m here to help you understand CVE-2024-47575. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70