VYPR
← All advisories
Medium severity4.4NVD Advisory· Published Aug 12, 2025· Updated Jun 17, 2026

CVE-2024-40588

CVE-2024-40588

Description

Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMail 7.6.0 through 7.6.1, FortiMail 7.4.0 through 7.4.3, FortiMail 7.2 all versions, FortiMail 7.0 all versions, FortiMail 6.4 all versions, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.6, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiRecorder 6.4 all versions, FortiVoice 7.0.0 through 7.0.3, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions may allow a privileged attacker to read files from the underlying filesystem via crafted CLI requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Fortinet/FortiCameracpe-rescue2 versions
    cpe:2.3:a:fortinet:forticamera:2.1.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticamera:2.1.4:*:*:*:*:*:*:*range: 2.1.0
    • (no CPE)range: 2.1, 2.0.0, 1.1, 1.0
  • Fortinet/Fortimail3 versions
    cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*range: >=6.4.0,<7.4.4
    • cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*range: 7.6.0
    • (no CPE)range: 7.6.0-7.6.1, 7.4.0-7.4.3, 7.2, 7.0, 6.4
  • Fortinet/Fortindr3 versions
    cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*range: >=7.0.0,<7.4.7
    • cpe:2.3:a:fortinet:fortindr:7.6.1:*:*:*:*:*:*:*range: 7.6.0
    • (no CPE)range: 7.6.0-7.6.1, 7.4.0-7.4.6, 7.2, 7.1, 7.0
  • Fortinet/FortiRecorder3 versions
    cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*range: >=6.4.0,<7.0.5
    • cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*range: 7.2.0
    • (no CPE)range: 7.2.0-7.2.1, 7.0.0-7.0.4, 6.4
  • Fortinet/Fortivoice3 versions
    cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*range: >=6.0.0,<6.4.10
    • cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*range: 7.0.0
    • (no CPE)range: 7.0.0-7.0.3, 6.4.0-6.4.9, 6.0
  • Fortinet/Forticamera Firmware
    cpe:2.3:o:fortinet:forticamera_firmware:*:*:*:*:*:*:*:*
    Range: >=2.0.0,<=2.1.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.