The vulnerability of the command-line interface of FortiOS operating systems and the FortiProx proxy server, which allows a hacker to decrypt the backup file.

FortiOS CLI and FortiProxy backup decryption vulnerability due to weak password hashes allows attackers to decrypt backups.

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for Use of Password Hash With Insufficient Computational Effort in Fortinet Fortiproxy	27 Jun 202418:52	–	githubexploit
Circl	CVE-2024-21754	1 May 202504:14	–	circl
CNNVD	Fortinet FortiOS and Fortinet FortiProxy Security Vulnerabilities	11 Jun 202400:00	–	cnnvd
CVE	CVE-2024-21754	11 Jun 202414:32	–	cve
Cvelist	CVE-2024-21754	11 Jun 202414:32	–	cvelist
EUVD	EUVD-2024-19368	3 Oct 202520:07	–	euvd
Tenable Nessus	Fortinet Fortigate Weak key derivation for backup file (FG-IR-23-423)	11 Jun 202400:00	–	nessus
ICS	Siemens RUGGEDCOM APE 1808	9 Jul 202400:00	–	ics
NCSC	Vulnerability fixed in Fortinet FortiOS	14 Jun 202409:59	–	ncsc
NCSC	Vulnerabilities fixed in Siemens Products	9 Jul 202418:40	–	ncsc