Executive Risk Summary
"A Stack-based Buffer Overflow vulnerability in Fortinet FortiManager may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests. The vulnerability affects FortiManager versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.10, and all versions of 6.4, if the service is enabled."
Operational Audit Arsenal
Manual Verification Required
This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.
Patch Impact Forecast
High
Internal Work Notes
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Scope of Impact
Original NVD Description
"A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms."