Critical severity9.0NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026
CVE-2024-48886
CVE-2024-48886
Description
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=7.4.1,<7.4.4
- cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*range: >=7.4.1,<7.4.4
cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=7.4.1,<7.4.4
- (no CPE)range: 7.6.0-7.6.1, 7.4.1-7.4.3
cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*range: >=7.4.1,<7.4.4
- (no CPE)range: 7.4.1-7.4.3
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=2.0.0,<2.0.15
- (no CPE)range: 7.4.0-7.4.4, 7.2.0-7.2.10, 7.0.0-7.0.17, 2.0.0-2.0.14
- (no CPE)range: 7.4.0
- Range: 7.4.1-7.4.3
Patches
Vulnerability mechanics
References
1- fortiguard.fortinet.com/psirt/FG-IR-24-221nvdVendor Advisory
News mentions
0No linked articles in our index yet.