CVE-2024-31496

Name of the Vulnerable Software and Affected Versions FortiManager versions 7.4.0 through 7.4.2 and before 7.2.5 FortiAnalyzer versions 7.4.0 through 7.4.2 and before 7.2.5 FortiAnalyzer-BigData versions 7.4.0 and before 7.2.7

Description A stack-based buffer overflow issue allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests. This can be achieved by sending a specially formed request to the affected system.

Recommendations For FortiManager versions 7.4.0 through 7.4.2 and before 7.2.5, update to a version that is not affected by this issue. For FortiAnalyzer versions 7.4.0 through 7.4.2 and before 7.2.5, update to a version that is not affected by this issue. For FortiAnalyzer-BigData versions 7.4.0 and before 7.2.7, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the CLI to minimize the risk of exploitation.