46 matches found
CVE-2024-23113
CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...
PoC-CVE-2024-23113
Disclaimer The code and materials contained in this repository are provided strictly for educational, research, and authorized security testing purposes. Prohibited Use Do not use this tool/code against any infrastructure, systems, or networks without explicit, prior written permission from the...
CVE-2024-23113
CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...
Fortinet FortiManager FGFM RCE Chain (CVE-2024-47575)
Exploits CVE-2024-47575 on FortiManager: unauthenticated FGFM TCP/541 registration and fileexchange acceptance. Confirms remoteid assignment, then uploads a putjsoncmd configuration blob for post-exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiManager FGFM unauth...
Lack of vulnerability management in Fortinet FortiManager
Fortinet has identified a vulnerability in FortiManager and FortiManager Cloud versions 7.2.5 through 7.6.1. The vulnerability involves an authentication bypass through an alternative route or channel. An external attacker who does not have valid credentials can impersonate a FortiGate device...
FGFM Authentication Weakening via CLI Configuration
An Authentication Bypass Using an Alternate Path or Channel CWE-288 vulnerability in FortiManager and FortiManager Cloud may allow a remote unauthenticated attacker to impersonate any FortiGate managed by the FortiManager with a specific CLI option set via crafted FGFM requests if the attacker ha...
Fortinet FGFM protocol - Detect
FortiGate to FortiManager Protocol FGFM was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FortiGate to FortiManager Protocol FGFM was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient:...
Fortinet FortiManager CVE-2024-47575 Detection
Detects FortiManager and probes FGFM TCP/541 for CVE-2024-47575 unauthenticated registration / fileexchange acceptance. !/usr/bin/env python3 -- coding: utf-8 -- """Fortinet FortiManager CVE-2024-47575 FGFM missing auth detection.""" from kittysploit import from lib.protocols.http.httpclient impo...
MINI-Q266-FGFM-JC97
Bulletin has no description...
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
Disclaimer The code and materials contained in this repository...
CVE-2024-26008
An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...
CVE-2024-26008
An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...
CVE-2024-26008
An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...
CVE-2024-26008
An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...
CVE-2024-26008
An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...
PT-2025-41941
Name of the Vulnerable Software and Affected Versions FortiOS versions 7.4.0 through 7.4.3 and prior to 7.2.7 FortiProxy versions 7.4.0 through 7.4.3 and prior to 7.2.9 FortiPAM versions prior to 1.2.0 FortiSwitchManager versions 7.2.0 through 7.2.3 and 7.0.0 through 7.0.3 Description An improper...
FGFM protocol allows unauthenticated reset of the connection
An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS, FortiProxy, FortiPAM & FortiSwitchManager fgfm daemon may allow an unauthenticated attacker to repeatedly reset the fgfm connection via crafted SSL encrypted TCP requests...
CVE-2024-26008: Improper Check for Unusual or Exceptional Conditions
An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...
Fortinet’s various products have code-related issues and vulnerabilities.
Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees from network attacks by combining a variety of detection technologie...
