Lucene search

FortinetVULNRICHMENT:CVE-2024-26015

HistoryJul 09, 2024 - 3:33 p.m.

CVE-2024-26015

2024-07-0915:33:30

CWE-1389

fortinet

github.com

vulnerability

number parsing

fortiproxy

fortios

ip address validation

bypass ip blocklist

crafted requests

cwe-1389

unauthenticated attacker

CVSS3

3.4

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N/E:F/RL:W/RC:R

AI Score

4.1

Confidence

High

EPSS

Percentile

13.4%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiProxy",
    "versions": [
      {
        "status": "affected",
        "version": "7.4.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.4.3"
      },
      {
        "status": "affected",
        "version": "7.2.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.2.10"
      },
      {
        "status": "affected",
        "version": "7.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.0.18"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Fortinet",
    "product": "FortiOS",
    "versions": [
      {
        "status": "affected",
        "version": "7.4.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.4.3"
      },
      {
        "status": "affected",
        "version": "7.2.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.2.8"
      },
      {
        "status": "affected",
        "version": "7.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.0.15"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"
    ],
    "vendor": "fortinet",
    "product": "fortiproxy",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThan": "7.1.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.2.0",
        "lessThan": "7.3.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.4.0",
        "versionType": "semver",
        "lessThanOrEqual": "7.4.3"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"
    ],
    "vendor": "fortinet",
    "product": "fortios",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThan": "7.1.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.2.0",
        "lessThan": "7.3.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.4.0",
        "versionType": "custom",
        "lessThanOrEqual": "7.4.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

fortiguard.fortinet.com/psirt/FG-IR-23-446

CVSS3

3.4

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N/E:F/RL:W/RC:R

AI Score

4.1

Confidence

High

EPSS

Percentile

13.4%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-26015