The vulnerability of Fortinet’s software products lies in the insufficient restriction of communication channels for specific endpoints, which allows attackers to carry out MITM attacks.

🗓️ 23 Apr 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Fortinet software has insufficient restrictions on communication channels for specified endpoints, enabling remote attackers to perform a man in middle attack.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-50565	8 Apr 202517:22	–	circl
CNNVD	Fortinet多款产品安全漏洞	8 Apr 202500:00	–	cnnvd
CVE	CVE-2024-50565	8 Apr 202514:03	–	cve
Cvelist	CVE-2024-50565	8 Apr 202514:03	–	cvelist
EUVD	EUVD-2025-10305	3 Oct 202520:07	–	euvd
Tenable Nessus	Fortinet Fortigate No certificate name verification for fgfm connection (FG-IR-24-046)	8 Apr 202500:00	–	nessus
Tenable Nessus	Fortinet FortiWeb No certificate name verification for fgfm connection (FG-IR-24-046)	8 Apr 202500:00	–	nessus
Tenable Nessus	Siemens APE1808 Improper Restriction of Communication Channel to Intended Endpoints (CVE-2024-50565)	23 Mar 202600:00	–	nessus
NVD	CVE-2024-50565	8 Apr 202514:15	–	nvd
OSV	CVE-2024-50565	8 Apr 202514:15	–	osv

Vulners

Node

fortinet fortiproxyMatch2.0

fortinet fortiproxyRange7.4.0–7.4.2

fortinet fortivoiceMatch6.0

fortinet fortivoiceRange6.4.0–6.4.8

fortinet fortiwebRange7.4.0–7.4.2

fortinet fortiproxyRange7.2.0–7.2.9

fortinet fortianalyzerRange7.2.0–7.2.4

fortinet fortimanagerRange7.2.0–7.2.4

fortinet fortimanagerRange7.0.0–7.0.11

fortinet fortimanagerRange7.4.0–7.4.2

fortinet fortimanagerRange6.4.0–6.4.14

fortinet fortianalyzerRange7.4.0–7.4.2

fortinet fortiwebMatch7.2

fortinet fortiwebMatch7.0

fortinet fortianalyzerRange7.0.0–7.0.11

fortinet fortianalyzerRange6.4.0–6.4.14

fortinet fortianalyzerRange6.2.0–6.2.13

fortinet fortimanagerRange6.2.0–6.2.13

fortinet fortiproxyRange7.0.0–7.0.15

fortinet fortivoiceRange7.0.0–7.0.2

fortinet fortiosMatch6.4

fortinet fortiosRange7.0.0–7.0.15

fortinet fortiosRange7.2.0–7.2.8

fortinet fortiosRange6.2.0–6.2.16

fortinet fortiosRange7.4.0–7.4.4

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-046
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2025040912
web	www.web.nvd.nist.gov/view/vuln/detail
fortiguard	www.fortiguard.com/psirt/FG-IR-24-046

23 Apr 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 22.6

CVSS 33.1

EPSS0.00335