CVE-2024-47571 | FortiManager - FortiGate Operational Intel

Executive Risk Summary

"A vulnerability in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials after expiration or release of a resource. This could lead to unauthorized access and potential data breaches, emphasizing the need for immediate patching or mitigation."

Operational Audit Arsenal

Target Type Firmware Image

Target Asset FortiGate Firmware

Standard Path Global Firmware

Manual Verification Required

This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.

Patch Impact Forecast

Reboot Required Likely

Moderate, as it may require downtime for FortiGate devices

Internal Work Notes

CVE-2024-47571: FortiManager vulnerability allowing unauthorized FortiGate access. Verify FortiManager version and apply updates as necessary to prevent potential security breaches.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Official Advisoryhttps://fortiguard.fortinet.com/psirt/FG-IR-24-239

Scope of Impact

Fortinet FortimanagerFortinet Fortimanager (Version 6.4.12)Fortinet Fortimanager (Version 7.4.0)Fortinet Fortimanager (Version 7.2.3)

Original NVD Description

"An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials."

Related Fortinet Threats

CVE-2024-23108 CVSS 10

FortiGate - API

CVE-2024-23109 CVSS 10

FortiGate - API

CVE-2023-34992 CVSS 10

FortiGate - API

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.