Fortinet published a security advisory detailing CVE-2024-21762, a vulnerability in FortiOS that can lead to remote code execution [1]. The vendor urged users to immediately upgrade to a patched version or apply mitigations described in the advisory [1]. Because network appliance vulnerabilities of this type are frequently exploited for initial access, unpatched devices should be remediated promptly and inspected for anomalous connections [1].
Fortinet Discloses Unauthenticated Remote Code Execution Vulnerability CVE-2024-21762 in FortiOS
1 min read
- Disclosed
- Feb 9, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 12, 2026
- CVSS basis
- Our assessment
- 84.6%, higher than 100% of CVEs
- Exploitation and patch status
- Patch available
- Attack vector
- Vulnerability status
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Organisations running: Fortinet FortiOS
What to do nowOur advice
Because network appliance vulnerabilities of this type are frequently exploited for initial access, unpatched devices should be remediated promptly and inspected for anomalous connections [1].
Affected scope
| Affected scope | Versions | Fixed in | |
|---|---|---|---|
| Fortinet FortiOS | 見 FG-IR-24-015 所列版本[1] | — | ✗ Unpatched |
Do you run this product?
Add it to your systems list and we'll email you about related advisories and major updates.
Timeline
Technical details
Source-Supported Details
Upgrade or apply workarounds in accordance with the FortiGuard PSIRT advisory, and inspect appliances for anomalous management connections or unauthorized configuration changes [1].
Source excerpt for verification: "A out-of-bounds write vulnerability [CWE-787] in FortiOS and FortiProxy may allow a remote unauthenticated attacker to execute arbitrary code or command via specially crafted HTTP requests." [1].
References
Official / primary1
- [1]
“A out-of-bounds write vulnerability [CWE-787] in FortiOS and FortiProxy may allow a remote unauthenticated attacker to execute arbitrary code or command via specially crafted HTTP requests.”
Corrections
- · countries: 攻擊來源:美國 → 原本把美國標成攻擊來源,但來源沒有指出攻擊者來自美國或受其支持,因此移除。
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.