CVE-2024-23113 — Fortinet Multiple Products Format String Vulnerability

CISA KEVExploited: confirmedFortinet

Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

Vulnerability details

Affected productsMultiple Products
KEV remediation due2024-10-30