coldbraid

CVE-2024-47575 Fortinet FortiManager

Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

CVSS
not scored

CWE-306

On CISA’s exploited list

Fortinet FortiManager Missing Authentication Vulnerability

Added
2024-10-23
Federal patch deadline
2024-11-13
Ransomware use
not known