April 25, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – CVE-2024-22349 – SonicWall SonicOS Vulnerability
February 9, 2024Rewterz Threat Alert – Remcos RAT – Active IOCs
February 9, 2024Rewterz Threat Advisory – CVE-2024-22349 – SonicWall SonicOS Vulnerability
February 9, 2024Rewterz Threat Alert – Remcos RAT – Active IOCs
February 9, 2024
Severity
High
Analysis Summary
CVE-2024-23108, CVE-2024-23109
Fortinet FortiSIEM could allow a remote attacker to execute arbitrary commands on the system, caused by OS command injection. By sending specially crafted API requests, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2024-23108
- CVE-2024-23109
Affected Vendors
Fortinet
Affected Products
- Fortinet FortiSIEM 6.4
- Fortinet FortiSIEM 6.5
- Fortinet FortiSIEM 6.6
- Fortinet FortiSIEM 6.7.0
- Fortinet FortiSIEM 7.0.0
Remediation
Refer to FortiGuard Advisory for patch, upgrade or suggested workaround information.
