VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jan 16, 2025· Updated Jan 14, 2026

CVE-2024-48885

CVE-2024-48885

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to escalate privilege via specially crafted packets.

Affected products

3
  • Fortinet/FortiRecorderv5
    cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*
    Range: 7.2.0
  • Fortinet/Fortivoicev5
    cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*
    Range: 7.0.0
  • Fortinet/Fortiwebv5
    cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*
    Range: 7.6.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.