Fortinet published a security advisory in October 2024 regarding CVE-2024-47575 in FortiManager [1]. The advisory noted that missing authentication could allow a remote attacker to execute unauthorized operations [1]. Because compromising the management platform can impact managed firewalls and configurations, organizations should immediately patch according to the advisory and inspect for anomalous nodes [1].
Backfill: this event became public on Oct 23, 2024 and we added it on Nov 10, 2026. It is not a new event.
Fortinet Discloses FortiManager Missing Authentication Vulnerability CVE-2024-47575
1 min read
- Disclosed
- Oct 23, 2024
- Published
- Nov 10, 2026
- Last updated
- Nov 12, 2026
- CVSS basis
- Our assessment
- 94.8%, higher than 100% of CVEs
- Exploitation and patch status
- Patch available
- Attack vector
- Vulnerability status
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Organisations running: Fortinet FortiManager
What to do nowOur advice
Because compromising the management platform can impact managed firewalls and configurations, organizations should immediately patch according to the advisory and inspect for anomalous nodes [1].
Affected scope
| Affected scope | Versions | Fixed in | |
|---|---|---|---|
| Fortinet FortiManager | 見官方 PSIRT[1] | — | ✗ Unpatched |
Do you run this product?
Add it to your systems list and we'll email you about related advisories and major updates.
Timeline
- Fortinet discloses CVE-2024-47575[1]
Technical details
Source-Supported Details
Please upgrade in accordance with the official PSIRT advisory and inspect for unknown device registrations or anomalous configuration changes [1].
Source excerpt: "Workarounds Upgrade to a fixed version or use one of the following workarounds, depending on the version you're running: 1- For FortiManager versions 7.0.12 or above, 7.2.5 or above, 7.4.3 or above (but not 7.6.0), prevent unknown devices to attempt to register: config system glo" [1].
References
Official / primary1
- [1]
“Workarounds Upgrade to a fixed version or use one of the following workarounds, depending on the version you're running: 1- For FortiManager versions 7.0.12 or above, 7.2.5 or above, 7.4.3 or above (but not 7.6.0), prevent unknown devices to attempt to register: config system glo”
Corrections
- · countries: 攻擊來源：美國 → 原本把美國標成攻擊來源，但來源沒有指出攻擊者來自美國或受其支持，因此移除。
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.