CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-36504: An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all...

6.2 CVSS

Description

An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated attacker to perform a denial of service on the SSLVPN web portal via a specially crafted URL.

Classification

CVE ID: CVE-2024-36504

CVSS Base Severity: MEDIUM

CVSS Base Score: 6.2

Affected Products

Vendor: Fortinet

Product: FortiOS

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.48% (scored less or equal to compared to others)

EPSS Date: 2025-02-12 (when was this score calculated)

References

https://fortiguard.fortinet.com/psirt/FG-IR-23-473

Timeline