CVE-2024-48889

🗓️ 18 Dec 2024 12:44:38Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 68 Views

CVE-2024-48889 in FortiManager allows remote attackers to execute unauthorized code via crafted requests.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-48889	18 Dec 202412:48	–	circl
CNNVD	Fortinet FortiManager 操作系统命令注入漏洞	18 Dec 202400:00	–	cnnvd
CNVD	Fortinet FortiManager Operating System Command Injection Vulnerability	25 Dec 202400:00	–	cnvd
Cvelist	CVE-2024-48889	18 Dec 202412:44	–	cvelist
EUVD	EUVD-2024-43222	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in FortiManager	19 Dec 202415:22	–	ncsc
NVD	CVE-2024-48889	18 Dec 202413:15	–	nvd
OSV	CVE-2024-48889	18 Dec 202413:15	–	osv
Positive Technologies	PT-2024-9736	18 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-48889	4 Feb 202523:35	–	redhatcve

NVD

Node

fortinet fortimanagerRange6.4.10–6.4.15

fortinet fortimanagerRange7.0.5–7.0.13

fortinet fortimanagerRange7.2.3–7.2.8

fortinet fortimanagerRange7.4.0–7.4.5

fortinet fortimanagerMatch7.6.0

Node

fortinet fortimanager_cloudRange7.0.1–7.0.13

fortinet fortimanager_cloudRange7.2.1–7.2.8

fortinet fortimanager_cloudRange7.4.1–7.4.5

[
  {
    "vendor": "Fortinet",
    "product": "FortiManager",
    "cpes": [
      "cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.6.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.4.0",
        "lessThanOrEqual": "7.4.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.2.3",
        "lessThanOrEqual": "7.2.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.5",
        "lessThanOrEqual": "7.0.12",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.10",
        "lessThanOrEqual": "6.4.14",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-425

13 Nov 2025 14:56Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.2

EPSS0.0209

SSVC

CWE-78

cve-2024-48889 fortimanager os command injection cwe-78 security vulnerability