Severity
High
Analysis Summary
CVE-2024-23108, CVE-2024-23109
Fortinet FortiSIEM could allow a remote attacker to execute arbitrary commands on the system, caused by OS command injection. By sending specially crafted API requests, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2024-23108
- CVE-2024-23109
Affected Vendors
Fortinet
Affected Products
- Fortinet FortiSIEM 6.4
- Fortinet FortiSIEM 6.5
- Fortinet FortiSIEM 6.6
- Fortinet FortiSIEM 6.7.0
- Fortinet FortiSIEM 7.0.0
Remediation
Refer to FortiGuard Advisory for patch, upgrade or suggested workaround information.