Home Fortinet CVE-2024-35273
Back to Fortinet

CVE-2024-35273

FortiManager - FortiManager Web UI

Fortinet CVSS 7.2 Updated March 16, 2026

Executive Risk Summary

"A vulnerability in Fortinet FortiManager versions 7.4.0 through 7.4.2 allows an attacker to escalate privileges via specially crafted HTTP requests, potentially leading to unauthorized access and control. This vulnerability can be exploited by sending malicious HTTP requests to the affected system, highlighting the need for immediate patching or mitigation."

Operational Audit Arsenal

Target Type Firmware Image
Target Asset FortiManager Firmware
Standard Path Global Firmware

Manual Verification Required

This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.

Patch Impact Forecast

Reboot Required Likely

Moderate

Internal Work Notes

FortiManager vulnerability CVE-2024-35273 - Out-of-bounds write vulnerability allowing privilege escalation, patch or mitigate ASAP

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Scope of Impact

Fortinet FortimanagerFortinet Fortimanager CloudFortinet Fortianalyzer CloudFortinet Fortianalyzer

Original NVD Description

"A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests."

Related Fortinet Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.