VDB
CVE-2024-48884
CVE-2024-48884
PUBLISHED
Es bestehen mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiMail, Fortinet FortiRecorder, Fortinet FortiVoice und Fortinet FortiWeb. Dieser Fehler ist auf eine unsachgemäße Behandlung von Verzeichnispfaden zurückzuführen. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um beliebige Ordner zu löschen und ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um beliebige Dateien zu schreiben.
EPSS 50.28% · 97.9th percentile
Risk Scores
EPSS Score
50.28%
97.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortinet FortiVoice | |
| Fortinet | Fortinet FortiMail | |
| Fortinet | Fortinet FortiRecorder | |
| Fortinet | Fortinet FortiOS | |
| Fortinet | Fortinet FortiWeb | |
| Fortinet | Fortinet FortiProxy |
Exploit Intelligence
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-5217 (circl)
- https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html (circl)
- https://crbug.com/1486441 (circl)
- http://www.openwall.com/lists/oss-security/2023/09/28/5 (circl)
- http://www.openwall.com/lists/oss-security/2023/09/28/6 (circl)
- http://www.openwall.com/lists/oss-security/2023/09/29/1 (circl)
- http://www.openwall.com/lists/oss-security/2023/09/29/2 (circl)
- http://www.openwall.com/lists/oss-security/2023/09/29/7 (circl)
- http://www.openwall.com/lists/oss-security/2023/09/29/9 (circl)
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/ (circl)
…and 66 more exploits
Timeline
- Sep 28, 2023 PoC Published
- Sep 29, 2023 PoC Published
- Oct 2, 2023 PoC Published
- Oct 2, 2023 PoC Published
- Oct 3, 2023 PoC Published
- Oct 5, 2023 PoC Published
- Dec 24, 2024 PoC Published
- Jan 14, 2025 CVE Published
- Jan 15, 2025 EPSS Score
- Jan 31, 2025 EPSS Score
- Feb 11, 2025 Coalition ESS Score
- Feb 15, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0095.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0095 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-494 advisory
- https://www.fortiguard.com/psirt/FG-IR-24-259 advisory
- https://www.fortiguard.com/psirt/FG-IR-24-221 advisory