9.3
Critique
CVE-2024-48887 A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to…
Description
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiSwitch | 7.6.0 | Pas de correctif indiqué |
| FortiSwitch 7.4 | 7.4.0 → 7.4.4 | Pas de correctif indiqué |
| FortiSwitch 7.2 | 7.2.0 → 7.2.8 | Pas de correctif indiqué |
| FortiSwitch 7.0 | 7.0.0 → 7.0.10 | Pas de correctif indiqué |
| FortiSwitch 6.4 | 6.4.0 → 6.4.14 | Pas de correctif indiqué |
Références
- fortiguard.fortinet.com fortiguard.fortinet.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FortiSwitch
Les 9 CVE de FortiSwitch →
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Faible
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Moyenne
CVE-2023-37936
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through…
9.6
Critique
CVE-2023-37937
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch…
7.6
Élevée