VDB
CVE-2024-46669
CVE-2024-46669
PUBLISHED
CVSS 3.2 LOW
Reported by fortinet · Published January 14, 2025
An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| fortios | fortinet | 7.4.5, 7.4.4, 7.2.11 |
Risk scores
CVSS 3.1
3.2
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiOS | 7.4.0, 7.2.0 |
| Fortinet | FortiOS | 7.4.0, 7.2.0 |
Timeline
- Jan 14, 2025 CVE Published
- Jan 15, 2025 EPSS Score (30 in total, the first dated here)
- Jan 31, 2025 Coalition ESS Score (17 in total, the first dated here)
- Apr 28, 2025 PoC Published
- Jan 14, 2026 CVE Updated
- Mar 17, 2026 Security Advisory (4 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-46669
vulnetix vdb fixes CVE-2024-46669Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-46669/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart