DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiSandbox: Mehrere Schwachstellen
view advisory published 2025-03-11
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um seine Privilegien zu erweitern, Code auszuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54027US | medium4.4OT elevated | — | ||
A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, ve… | ||||
| CVE-2024-54026US | high8.8 | — | ||
An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2 all versions, FortiSandbox 4.… | ||||
| CVE-2024-54018US | — | — | ||
Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a privileged attacker to execute unauthorize… | ||||
| CVE-2024-52961US | — | — | ||
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, FortiSandbox 4.4.0 through 4.4.6, FortiSan… | ||||
| CVE-2024-52960US | high8.8 | — | ||
A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0 through 4.4.6 and before 4.2.7 allows an authenticated attac… | ||||
| CVE-2024-45328US | —OT elevated | — | ||
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI consol… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2025-0531 - CSAF Versionself
- WID-SEC-2025-0531 - Portal Versionself
- FortiGuard PSIRT Advisory FG-IR-24-110 vom 2025-03-11external
- FortiGuard PSIRT Advisory FG-IR-24-261 vom 2025-03-11external
- FortiGuard PSIRT Advisory FG-IR-24-305 vom 2025-03-11external
- FortiGuard PSIRT Advisory FG-IR-24-306 vom 2025-03-11external
- FortiGuard PSIRT Advisory FG-IR-24-327 vom 2025-03-11external
- FortiGuard PSIRT Advisory FG-IR-24-353 vom 2025-03-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan