CVE-2024-23113
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
61.7%
99.1th percentile
CISA KEV
Listed
Added 2024-10-09 · patch by 2024-10-30
Weakness / dates
—
Published — · modified —
Description
Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.