FortiOS - RCE (CVE-2024-21762)
Description
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests
psychologyCrowdSec Analysis
CVE-2024-21762 is an out-of-bounds write vulnerability affecting multiple versions of Fortinet FortiProxy and FortiOS. This flaw allows attackers to execute unauthorized code or commands on the affected systems by sending specially crafted requests, potentially leading to full system compromise or further attacks within the network.
CrowdSec has been tracking this vulnerability and its exploits since 1st of April 2025.
CrowdSec has not observed any significant exploitation activity targeting CVE-2024-21762 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit CVE-2024-23113 by sending specially crafted POST requests to the /remote/vulncheck endpoint on Fortinet FortiOS SSL VPN interfaces, attempting to trigger a heap buffer underflow vulnerability.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2024-02-09 |
| CISA KEV | 2024-02-09 |
| CISA Remediation Deadline | 2024-02-16 |
| Rule Released | 2025-04-01 |
| CrowdSec First Seen | 2025-08-17 |