CVE-2024-23113

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 61.73%
EPSS Percentile: 99.16%
CISA KEV: YES — Known Exploited Vulnerability

Description

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: psirt@fortinet.com
Published: 15-Feb-2024 21:15
Last Modified: 17-Jun-2026 14:12
EPSS Date: 2026-10-12
CWE: CWE-134

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CISA KEV Details

Date Added: 2024-10-09
Remediation Due: 2024-10-30
Known Ransomware Campaign Use: Unknown
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes: https://www.fortiguard.com/psirt/FG-IR-24-029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-23113

Affected Products / Versions

fortinet / fortiproxy
Version / affected range: * · from (inclusive) 7.0.0 · through (inclusive) 7.0.14
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
fortinet / fortiproxy
Version / affected range: * · from (inclusive) 7.2.0 · through (inclusive) 7.2.8
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
fortinet / fortiproxy
Version / affected range: * · from (inclusive) 7.4.0 · through (inclusive) 7.4.2
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
fortinet / fortiswitchmanager
Version / affected range: * · from (inclusive) 7.0.0 · through (inclusive) 7.0.3
cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*
fortinet / fortiswitchmanager
Version / affected range: * · from (inclusive) 7.2.0 · through (inclusive) 7.2.3
cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*
fortinet / fortios
Version / affected range: * · from (inclusive) 7.0.0 · through (inclusive) 7.0.13
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
fortinet / fortios
Version / affected range: * · from (inclusive) 7.2.0 · through (inclusive) 7.2.6
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
fortinet / fortios
Version / affected range: * · from (inclusive) 7.4.0 · through (inclusive) 7.4.2
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
fortinet / fortipam
Version / affected range: * · from (inclusive) 1.0.0 · through (inclusive) 1.0.3
cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*
fortinet / fortipam
Version / affected range: * · from (inclusive) 1.1.0 · through (inclusive) 1.1.2
cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*
fortinet / fortipam
Version / affected range: 1.2.0
cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*

References

Last enrichment sync: 13-Oct-2026 10:00
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Amazon Threat Intelligence reported a threat actor scanning Fortigate devices for use of default credentials and exploiting older vulnerabilities (including CVE-2024-55591 and CVE-2024-23113) Threat-Hunting Guide Shows How to Detect Attacks on FortiGate Appliances

CVE (4)

Malware (1)

Threat Actors (4)

MITRE ATT&CK (9)

Vendors (2)

Products (5)

Tools (3)

Industries (1)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.