CVE-2024-45324

score

<0.1

cvss

7.2

epss

0.7%

published

2025-03-11

kev added

—

first seen

2026-10-21

FortiOS versions 7.4.0-7.4.4, 7.2.0-7.2.9, 7.0.0-7.0.15, and before 6.4.15, FortiProxy versions 7.4.0-7.4.6, 7.2.0-7.2.12, and before 7.0.19, FortiPAM versions 1.4.0-1.4.2 and before 1.3.1, FortiSRA versions 1.4.0-1.4.2 and before 1.3.1, and FortiWeb versions 7.4.0-7.4.5, 7.2.0-7.2.10, and before 7.0.10 contain a use of externally-controlled format string vulnerability caused by improper handling of user-controlled input in HTTP/HTTPS commands, letting privileged attackers execute arbitrary code or commands, exploit requires sending crafted HTTP/HTTPS requests.