The vulnerability of the graphical interface of Fortinet’s centralized device management solutions, FortiManager and FortiManager Cloud, as well as the security event monitoring and analysis solutions FortiAnalyzer, FortiAnalyzer Cloud, and FortiAnalyzer-BigData, allows a perpetrator to execute arbitrary code or commands.

🗓️ 17 Feb 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Vulnerability in FortiManager and FortiAnalyzer interfaces enables arbitrary code execution via crafted HTTP requests.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-40584	11 Feb 202516:36	–	circl
CNNVD	Fortinet多款产品操作系统命令注入漏洞	11 Feb 202500:00	–	cnnvd
CVE	CVE-2024-40584	11 Feb 202516:09	–	cve
Cvelist	CVE-2024-40584	11 Feb 202516:09	–	cvelist
EUVD	EUVD-2025-4974	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS and FortiProxy	18 Feb 202508:09	–	ncsc
NVD	CVE-2024-40584	11 Feb 202517:15	–	nvd
OSV	CVE-2024-40584	11 Feb 202517:15	–	osv
RedhatCVE	CVE-2024-40584	14 Feb 202501:41	–	redhatcve

Vulners

Node

fortinet fortianalyzerRange7.4.0–7.4.3

OR

fortinet fortianalyzer_cloudRange7.4.1–7.4.3

OR

fortinet fortianalyzerRange7.2.0–7.2.5

OR

fortinet fortianalyzer-bigdataMatch7.4.0

OR

fortinet fortianalyzer-bigdataRange7.2.0–7.2.7

OR

fortinet fortimanagerRange7.2.0–7.2.5

OR

fortinet fortimanager_cloudRange7.4.1–7.4.3

OR

fortinet fortimanager_cloudRange7.2.1–7.2.5

OR

fortinet fortimanagerRange7.4.0–7.4.3

OR

fortinet fortianalyzerRange6.2.2–6.2.13

OR

fortinet fortianalyzer_cloudRange7.2.1–7.2.5

OR

fortinet fortimanagerRange6.2.2–6.2.13

OR

fortinet fortianalyzerRange6.4.0–6.4.15

OR

fortinet fortianalyzerRange7.0.0–7.0.13

OR

fortinet fortianalyzer_cloudRange6.4.0–6.4.7

OR

fortinet fortianalyzer_cloudRange7.0.0–7.0.13

OR

fortinet fortianalyzer-bigdataRange6.4.0–6.4.7

OR

fortinet fortianalyzer-bigdataRange6.2.0–6.2.5

OR

fortinet fortianalyzer-bigdataRange7.0.0–7.0.6

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-220
web	www.web.nvd.nist.gov/view/vuln/detail
fortiguard	www.fortiguard.com/psirt/FG-IR-24-220

17 Feb 2025 00:00Current

6Medium risk

Vulners AI Score6

CVSS 37.2

CVSS 29

EPSS0.01885

FortiManager FortiManager Cloud FortiAnalyzer FortiAnalyzer Cloud FortiAnalyzer BigData Arbitrary code execution Hypertext requests Graphical interface Vulnerability