Critical severity · published Oct 23, 2024
CVE-2024-47575
Fortinet FortiManager Missing Authentication Vulnerability
In wildKEV
9.8
CVSS
94.8%
EPSS
Yes
On KEV
Description
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)94.8% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Oct 23, 2024
Federal remediation dueNov 13, 2024
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiManager · Fortinet
7.6.0; 7.4.0 through 7.4.4; 7.2.0 through 7.2.7; 7.0.0 through 7.0.12; 6.4.0 through 6.4.14; 6.2.0 through 6.2.12 · source: vendor, NVD, KEV
FC
Fortimanager Cloud · Fortinet
6.4.1 through 6.4.7; 7.0.1 before 7.0.13; 7.2.1 before 7.2.8; 7.4.1 before 7.4.5 · source: NVD
In the news
BreachCritical
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
The post Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant appeared first on Unit 42 .
Oct 14, 2026·Unit42 (Palo Alto)
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-47575
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-47575
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
fortiguard.fortinet.com
https://fortiguard.fortinet.com/psirt/FG-IR-24-423
More from FortiManager
9.8
CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
9.8
CVE-2023-25610
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0…
9.8
CVE-2024-50563
A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3,…
9.8
CVE-2024-48886
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4,…
9.8
CVE-2024-47571
An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials