9.3
Critical
CVE-2024-48887 A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to…
Description
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSwitch | 7.6.0 | No fix stated |
| FortiSwitch 7.4 | 7.4.0 → 7.4.4 | No fix stated |
| FortiSwitch 7.2 | 7.2.0 → 7.2.8 | No fix stated |
| FortiSwitch 7.0 | 7.0.0 → 7.0.10 | No fix stated |
| FortiSwitch 6.4 | 6.4.0 → 6.4.14 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiSwitch
The 9 CVEs of FortiSwitch →
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Low
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Medium
CVE-2023-37936
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through…
9.6
Critical
CVE-2023-37937
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch…
7.6
High