CVE-2024-55591

🗓️ 14 Jan 2025 14:08:34Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 29 Media mentions👁 542 Views

Authentication Bypass vulnerability in FortiOS and FortiProxy allows remote super-admin access.

Reporter	Title	Published	Views	Family All 43
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy	16 Jan 202507:26	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy	29 Jan 202514:54	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy	21 Jan 202512:30	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy	27 Jan 202506:25	–	githubexploit
GithubExploit	FortiGate-FortiWeb-Multi-Exploit-Extractor	14 May 202614:07	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy	24 Jan 202520:29	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy	29 Jan 202519:39	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy	26 May 202511:57	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy	11 Apr 202513:52	–	githubexploit
ATTACKERKB	CVE-2024-55591	14 Jan 202500:00	–	attackerkb

NVD

Node

fortinet fortiproxyRange7.0.0–7.0.20

fortinet fortiproxyRange7.2.0–7.2.13

fortinet fortiosRange7.0.0–7.0.17

[
  {
    "vendor": "Fortinet",
    "product": "FortiOS",
    "cpes": [
      "cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.16",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fortinet",
    "product": "FortiProxy",
    "cpes": [],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.12",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.19",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-535
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

24 Oct 2025 12:54Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.94124

SSVC