{"id":"CVE-2024-21762","kind":"vulnerability","aliases":["CVE-2024-21762"],"related":[],"title":"A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS…","description":"A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests","summary":"Fortinet FortiOS, the firmware on FortiGate firewalls and VPN appliances, has an out-of-bounds write in its HTTP handling. A remote unauthenticated attacker can send crafted HTTP requests to execute code or commands on the device.","severity":"critical","cvss":9.8,"epss":null,"exploited":true,"exploited_at":"2024-02-09T00:00:00+00:00","products":[{"name":"fortinet fortiproxy","fixed":["2.0.14"],"affected":">= 1.0.0, < 2.0.14","ecosystem":"vendor"},{"name":"fortinet fortiproxy","fixed":["7.0.15"],"affected":">= 7.0.0, < 7.0.15","ecosystem":"vendor"},{"name":"fortinet fortiproxy","fixed":["7.2.9"],"affected":">= 7.2.0, < 7.2.9","ecosystem":"vendor"},{"name":"fortinet fortiproxy","fixed":["7.4.3"],"affected":">= 7.4.0, < 7.4.3","ecosystem":"vendor"},{"name":"fortinet fortios","fixed":["6.0.18"],"affected":">= 6.0.0, < 6.0.18","ecosystem":"vendor"},{"name":"fortinet fortios","fixed":["6.2.16"],"affected":">= 6.2.0, < 6.2.16","ecosystem":"vendor"},{"name":"fortinet fortios","fixed":["6.4.15"],"affected":">= 6.4.0, < 6.4.15","ecosystem":"vendor"},{"name":"fortinet fortios","fixed":["7.0.14"],"affected":">= 7.0.0, < 7.0.14","ecosystem":"vendor"},{"name":"fortinet fortios","fixed":["7.2.7"],"affected":">= 7.2.0, < 7.2.7","ecosystem":"vendor"},{"name":"fortinet fortios","fixed":["7.4.3"],"affected":">= 7.4.0, < 7.4.3","ecosystem":"vendor"},{"name":"Fortinet FortiOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","fortigate","fortios","infrastructure","ransomware","vpn-appliance"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the mitigation or patch per Fortinet's vendor advisory, or discontinue use of the product if mitigations are unavailable (per CISA required action). Specific fixed versions: unknown","status":"open","published_at":"2024-02-09T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:02:24+00:00","updated_at":"2026-10-24T00:09:51+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-10-23T21:02:24Z","model":"claude-haiku-5-5","output":{"fix":"Apply the mitigation or patch per Fortinet's vendor advisory, or discontinue use of the product if mitigations are unavailable (per CISA required action). Specific fixed versions: unknown","reach":"internet","impact":"high","summary":"Fortinet FortiOS, the firmware on FortiGate firewalls and VPN appliances, has an out-of-bounds write in its HTTP handling. A remote unauthenticated attacker can send crafted HTTP requests to execute code or commands on the device.","category":"infrastructure","who_cares":["fortios","fortigate","vpn-appliance"],"confidence":0.8,"needs_auth":"no","worst_case":"Attacker runs code or commands on the firewall without credentials.","analyst_note":"Find the Fortinet PSIRT advisory for CVE-2024-21762 to get affected and fixed FortiOS versions, the exact mitigation setting, and a way to check exposure; the sources only cite the CISA KEV entry.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000489,"input_tokens":2832,"output_tokens":412,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2024':20A,23A '-21762':21A,24A '01.00':159C '01.01':151C '01.02':143C '1.1':155C '1.2':147C '2.0.0':139C '2.0.13':141C '6.0':123C '6.2.0':119C '6.2.15':121C '6.4.0':115C '6.4.14':117C '7.0.0':111C,135C '7.0.13':113C '7.0.14':137C '7.2.0':15A,107C,131C '7.2.6':17A,109C '7.2.8':133C '7.4.0':11A,103C,127C '7.4.2':13A,105C,129C 'allow':162C 'applianc':54B,64B 'attack':79B,163C 'bound':5A,70B,97C 'code':87B,167C 'command':89B,169C 'craft':82B,172C 'cve':19A,22A 'devic':92B 'execut':86B,165C 'exploit':47B 'firewal':61B 'firmwar':58B 'fortig':48B,60B 'fortinet':9A,25A,27A,29A,31A,33A,35A,37A,39A,41A,43A,45A,55B,101C 'fortio':10A,14A,18A,49B,56B,102C,106C,110C,114C,118C,122C 'fortios':34A,36A,38A,40A,42A,44A,46A 'fortiproxi':126C,130C,134C,138C,142C,146C,150C,154C,158C 'fortiproxy':26A,28A,30A,32A 'handl':75B 'http':74B,83B 'infrastructur':50B 'out-of-bound':2A,67B,94C 'ransomwar':51B 'remot':77B 'request':84B,173C 'send':81B 'specif':171C 'unauthent':78B 'unauthor':166C 'version':125C,145C,149C,153C,157C,161C 'via':170C 'vpn':53B,63B 'vpn-applianc':52B 'vulner':7A,99C 'write':6A,71B,98C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-02-09T00:00:00+00:00","kev":{"dateAdded":"2024-02-09","dueDate":"2024-02-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"psirt@fortinet.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-21762","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21762","severity":null,"published_at":"2024-02-09T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T20:35:34+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-21762","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21762","severity":null,"published_at":"2024-02-09T09:15:08+00:00","modified_at":"2026-10-22T19:20:41+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}