CVE-2024-50568 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy…
Medium CVSS: 5.9

CVE-2024-50568

A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 through 7.4.3, 7.2.0 through 7.2.9 and before 7.0.16 allows an unauthenticated attacker with the knowledge of device specific data to spoof the identity of a downstream device of the security fabric via crafted TCP requests.
Vendor
Fortinet
Product
Fortiproxy
CWE
CWE-300
Yayın Tarihi
2025-06-10 17:19:25
Güncelleme
2025-07-25 15:25:35
Source Identifier
psirt@fortinet.com
KEV Date Added
-

Kategoriler

Referanslar