CVE-2024-50565

score

<0.1

cvss

3.1

epss

0.4%

published

2025-04-08

kev added

—

first seen

2026-10-21

Fortinet FortiOS (versions 7.4.0-7.4.3, 7.2.0-7.2.7, 7.0.0-7.0.14, 6.4.0-6.4.15, 6.2.0-6.2.16), FortiProxy, FortiManager, FortiAnalyzer, FortiVoice, and FortiWeb contain an improper restriction of communication channel to intended endpoints caused by intercepting FGFM authentication requests, letting unauthenticated attackers impersonate management devices via man-in-the-middle attacks, exploit requires attacker to be in a man-in-the-middle position intercepting network traffic.