Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2024-47575

🗓️ 23 Oct 2024 15:03:48Reported by fortinetType 
cve
 cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 527 Views🌐 WEB

A missing authentication in FortiManager allows attacker to execute arbitrary code or command

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
zdt
zdt		Fortinet FortiManager Unauthenticated Remote Code Execution Exploit
3 Dec 202400:00
–zdt
githubexploit
GithubExploit		Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager
22 Nov 202403:13
–githubexploit
githubexploit
GithubExploit		Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager
7 Nov 202421:03
–githubexploit
githubexploit
GithubExploit		Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager
15 Nov 202403:43
–githubexploit
attackerkb
attackerkb		CVE-2024-47575
23 Oct 202400:00
–attackerkb
avleonov
Information Security Automation		About Remote Code Execution – FortiManager “FortiJump” (CVE-2024-47575) vulnerability
19 Nov 202421:26
–avleonov
avleonov
Information Security Automation		New episode “In The Trend of VM” (#10): 8 trending vulnerabilities of November, zero budget VM and who should look for patches
2 Jan 202519:34
–avleonov
bdu_fstec
BDU FSTEC		The vulnerability of the fgfmd software for Fortinet FortiManager device centralized management allows a perpetrator to execute arbitrary code.
25 Oct 202400:00
–bdu_fstec
circl
Circl		CVE-2024-47575
23 Oct 202416:01
–circl
cisa_kev
CISA KEV Catalog		Fortinet FortiManager Missing Authentication Vulnerability
23 Oct 202400:00
–cisa_kev
Rows per page
NVD
Vulners
Node
OR
fortinetfortimanagerRange6.2.0–6.2.13
fortinetfortimanagerRange6.4.0–6.4.15
fortinetfortimanagerRange7.0.0–7.0.13
fortinetfortimanagerRange7.2.0–7.2.8
fortinetfortimanagerRange7.4.0–7.4.5
fortinetfortimanagerMatch7.6.0
fortinetfortimanager_cloudRange6.4.1–6.4.7
fortinetfortimanager_cloudRange7.0.1–7.0.13
fortinetfortimanager_cloudRange7.2.1–7.2.8
fortinetfortimanager_cloudRange7.4.1–7.4.5
[
  {
    "vendor": "Fortinet",
    "product": "FortiManager",
    "cpes": [
      "cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.6.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.4.0",
        "lessThanOrEqual": "7.4.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.12",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.14",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.12",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
serialnorequest bodyFGFM/get_authFGFM authentication request used to register device before establishing a channelCWE-306
platformrequest bodyFGFM/get_authFGFM authentication request used to register device before establishing a channelCWE-306
hostnamerequest bodyFGFM/get_authFGFM authentication request used to register device before establishing a channelCWE-306
tcp_portrequest bodyFGFM/get_connect_tcpFGFM request to create a TCP channel for remote shell accessCWE-306
chan_window_szrequest bodyFGFM/get_connect_tcpFGFM request to create a TCP channel for remote shell accessCWE-306
terminalrequest bodyFGFM/get_connect_tcpFGFM request to create a TCP channel for remote shell accessCWE-306
cmdrequest bodyFGFM/get_connect_tcpFGFM request to create a TCP channel for remote shell accessCWE-306
localidrequest bodyFGFM/get_connect_tcpFGFM request to create a TCP channel for remote shell accessCWE-306
remoteidrequest bodyFGFM/channelFGFM channel request delivering the payload to execute on the remote hostCWE-306
payloadrequest bodyFGFM/channelFGFM channel request delivering the payload to execute on the remote hostCWE-306

virtualbitz2048

Fortimanager-InternetFacingACL

Efficient_Agent_2048

What’sgoingonwithFortinet?FirewallandSD-WANCVEspushingustolookforalternatives

wokkelp

FortiManagerinAzureconnectingtoazureblobstorage?

patchnow24x7

I have updated the blog with a few more IOCs(IP Address) as mentioned in the Official advisory for CVE-2024-47575- FortiNet's FortiManager RCE vulnerability. Refer: https://t.co/by2ni6GgRw #PatchNOW #cybersecurity #Cyberattack #infosec #DataBreach

BentleyAudrey

https://t.co/iwfe56jSzx CVE-2024-47575: FortiManager Missing Authentication Zero-Day Vulnerability Explained

HunterMapping

AlertCVE-2024-47575: Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump PoC & Deep Dive: https://t.co/5qcYoPJdN3 Git Link: : https://t.co/0dLbKLHf6h 9.9K+ Services are found on https://t.co/g3tSyh13yE yearly. Hunter Link: https://t.co/nOWQc6ovfu Query HUNTER:/product.name="FortiManager" #Fortinet #PoC #hunterhow #infosec #infosecurity #OSINT #Vulnerability

noperator

Two weeks ago, my team (Capability Development Group @ Bishop Fox) published a deep dive on FortiManager in support of analyzing FortiJump (CVE-2024-47575, missing authentation in fgfmsd), which is being actively exploited in the wild. We cover prerequisite steps for discovering and exploiting CVE-2024-47575, including embedded certificate extraction and mutual TLS authentication, and firmware extraction, decompression, and decryption. We also identify a patched command injection vulnerability. Check it out here: • /bishopfox: https://t.co/U53rczYCu3 There are a few great posts published by others in the past two days that explore these prerequisites from different angles, and build on this work by identifying and exploiting unauthenticated command handlers, leading to remote code execution: • /rapid7: https://t.co/a30wKpACiW • /watchtowrcyber: https://t.co/sgvsTPA7Ex Patch your FortiManagers, folks

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 07:57Current
10Critical risk
Vulners AI Score10
CVSS 3.19.8
EPSS0.9507
SSVC
CWE-306In Wild
fortimanagermissing authenticationarbitrary code.
527