CVE-2024-23109: OS Command Injection

Q: What is the severity of CVE-2024-23109?

CVE-2024-23109 is considered to have a critical severity level due to its potential for remote code execution.

Q: How do I fix CVE-2024-23109?

To fix CVE-2024-23109, it is recommended to upgrade FortiSIEM to versions 7.1.2 or higher, 7.0.3 or higher, 6.8.0 or higher, or apply the necessary patches provided by Fortinet.

Q: Which versions of FortiSIEM are affected by CVE-2024-23109?

CVE-2024-23109 affects FortiSIEM versions 6.4.0 through 7.1.1.

Q: What type of vulnerability is CVE-2024-23109?

CVE-2024-23109 is classified as an OS command injection vulnerability.

Q: Can CVE-2024-23109 lead to data breaches?

Yes, CVE-2024-23109 can potentially lead to unauthorized access and data breaches if exploited.

Published Feb 5, 2024

Updated

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests.

Affected Software

9 affected components

Fortinet FortiSIEM>=6.4.0<=6.4.2

Fortinet FortiSIEM>=6.5.0<=6.5.2

Fortinet FortiSIEM>=6.6.0<=6.6.3

Fortinet FortiSIEM>=6.7.0<=6.7.8

Fortinet FortiSIEM>=7.0.0<=7.0.2

Fortinet FortiSIEM=7.1.0

Fortinet FortiSIEM=7.1.1

Fortinet FortiOS

Fortinet FortiProxy

Remediation

Information

Please upgrade to FortiSIEM version 7.1.2 or above Please upgrade to FortiSIEM version 7.0.3 or above Please upgrade to FortiSIEM version 6.7.9 or above Please upgrade to FortiSIEM version 6.6.4 or above Please upgrade to FortiSIEM version 6.5.3 or above Please upgrade to FortiSIEM version 6.4.4 or above Please upgrade to upcoming FortiSIEM version 7.2.0 or above

Event History

Feb 5, 2024

CVE Published

via MITRE·01:26 PM

Data Sourced

via MITRE·01:26 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 6, 2024

News Published

via The Register·01:30 PM

News Published

via The Register·01:33 PM

Feb 7, 2024

News Published

via BleepingComputer·01:29 PM

News Published

via BleepingComputer·01:31 PM

Feb 8, 2024

News Published

via BleepingComputer·12:55 AM

Feb 9, 2024

News Published

via The Register·02:30 PM

News Published

via BleepingComputer·09:02 PM

May 28, 2024

News Published

via BleepingComputer·04:16 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-23109?

CVE-2024-23109 is considered to have a critical severity level due to its potential for remote code execution.

How do I fix CVE-2024-23109?

To fix CVE-2024-23109, it is recommended to upgrade FortiSIEM to versions 7.1.2 or higher, 7.0.3 or higher, 6.8.0 or higher, or apply the necessary patches provided by Fortinet.

Which versions of FortiSIEM are affected by CVE-2024-23109?

CVE-2024-23109 affects FortiSIEM versions 6.4.0 through 7.1.1.

What type of vulnerability is CVE-2024-23109?

CVE-2024-23109 is classified as an OS command injection vulnerability.

Can CVE-2024-23109 lead to data breaches?

Yes, CVE-2024-23109 can potentially lead to unauthorized access and data breaches if exploited.

CVE-2024-23109: OS Command Injection

Affected Software

Remediation

Information

Event History

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-23109?

How do I fix CVE-2024-23109?

Which versions of FortiSIEM are affected by CVE-2024-23109?

What type of vulnerability is CVE-2024-23109?

Can CVE-2024-23109 lead to data breaches?

Company

Resources

Contact