CVE-2024-21762 is a critical security vulnerability affecting certain versions of Fortinet FortiOS and FortiProxy systems. This out-of-bounds write issue allows remote attackers to execute unauthorized code or commands through specially crafted requests. With a severity score of 9.8, it's crucial for organizations to address this vulnerability to protect their systems and data.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, you'll need to check if you're using specific versions of Fortinet FortiOS and FortiProxy. Affected versions include FortiOS 6.0.0 to 7.4.2 and FortiProxy 1.0.0 to 7.4.2. If you're using any of these versions, your system may be vulnerable to this critical security issue.

What should I do if I'm affected?

If you're affected by the vulnerability, it's important to take action to protect your systems. Upgrade your Fortinet FortiOS or FortiProxy software to a fixed version as recommended by the vendor. If you can't upgrade immediately, disable SSL VPN as a temporary workaround. Always follow the vendor's instructions when applying updates or mitigations to ensure the best protection.

Is CVE-2024-21762 in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, it is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, named Fortinet FortiOS Out-of-Bound Write Vulnerability, was added to the catalog on February 9, 2024, and the due date for required action is February 16, 2024. Organizations must apply mitigations as per vendor instructions or discontinue the product's use if no mitigations are available.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-787, which is an out-of-bounds write issue affecting Fortinet FortiOS and FortiProxy, allowing remote unauthenticated attackers to execute arbitrary code or commands via specially crafted HTTP requests.

For more details

CVE-2024-21762 is a critical vulnerability with severe implications for affected systems. For a comprehensive understanding of this issue, including its description, severity, technical details, and known affected software configurations, refer to the NVD page and the resources listed below.

• FortiGuard Labs

• CISA BOD 22-01

• CISA Known Exploited Vulnerabilities Catalog