NCSC-2025-0083

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Fortinet FortiSandbox

view advisory published 2025-03-12

Fortinet heeft kwetsbaarheden verholpen in FortiSandbox.

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-54027US	medium4.4OT elevated	0.16% (5th)	—	2025-03-17
A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, ve…
CVE-2024-54026US	high8.8	0.42% (36th)	—	2025-03-11
An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2 all versions, FortiSandbox 4.…
CVE-2024-54018US	—	10.0% (96th)	—	2025-03-11
Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a privileged attacker to execute unauthorize…
CVE-2024-52961US	—	0.55% (46th)	—	2025-03-11
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, FortiSandbox 4.4.0 through 4.4.6, FortiSan…
CVE-2024-52960US	high8.8	0.34% (27th)	—	2025-03-11
A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0 through 4.4.6 and before 4.2.7 allows an authenticated attac…
CVE-2024-45328US	—OT elevated	0.14% (4th)	—	2025-03-11
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI consol…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.