145 lines
6.3 KiB
JSON
145 lines
6.3 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2024-46669",
|
||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "fortinet",
|
||
"dateReserved": "2024-09-11T12:14:59.204Z",
|
||
"datePublished": "2025-01-14T14:08:37.297Z",
|
||
"dateUpdated": "2026-01-14T09:15:04.890Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"affected": [
|
||
{
|
||
"vendor": "Fortinet",
|
||
"product": "FortiOS",
|
||
"cpes": [
|
||
"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"
|
||
],
|
||
"defaultStatus": "unaffected",
|
||
"versions": [
|
||
{
|
||
"versionType": "semver",
|
||
"version": "7.4.0",
|
||
"lessThanOrEqual": "7.4.4",
|
||
"status": "affected"
|
||
},
|
||
{
|
||
"versionType": "semver",
|
||
"version": "7.2.0",
|
||
"lessThanOrEqual": "7.2.11",
|
||
"status": "affected"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service."
|
||
}
|
||
],
|
||
"providerMetadata": {
|
||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||
"shortName": "fortinet",
|
||
"dateUpdated": "2026-01-14T09:15:04.890Z"
|
||
},
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"cweId": "CWE-190",
|
||
"description": "Denial of service",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"format": "CVSS",
|
||
"cvssV3_1": {
|
||
"version": "3.1",
|
||
"attackComplexity": "LOW",
|
||
"attackVector": "ADJACENT_NETWORK",
|
||
"availabilityImpact": "LOW",
|
||
"baseScore": 3.2,
|
||
"baseSeverity": "LOW",
|
||
"confidentialityImpact": "NONE",
|
||
"integrityImpact": "NONE",
|
||
"privilegesRequired": "LOW",
|
||
"scope": "UNCHANGED",
|
||
"userInteraction": "NONE",
|
||
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R"
|
||
}
|
||
}
|
||
],
|
||
"solutions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Upgrade to FortiOS version 7.6.1 or above\nUpgrade to FortiOS version 7.4.5 or above\nUpgrade to FortiOS version 7.2.12 or above\nFortinet remediated this issue in FortiSASE version 24.4.a and hence customers do not need to perform any action."
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-267",
|
||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-267"
|
||
}
|
||
]
|
||
},
|
||
"adp": [
|
||
{
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2025-01-14T15:15:26.892124Z",
|
||
"id": "CVE-2024-46669",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "partial"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2025-01-14T20:56:51.902Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |